ffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:10:08 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r1 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
fcntl$notify(r0, 0x402, 0x12)
fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.apparmor\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
r4 = fcntl$dupfd(r0, 0x0, r1)
pwrite64(r4, &(0x7f0000000480)="9a3e44bd9f815979d4d16e80bb8fcb0a6e04af3303f92128bf16fb86555cae018146ccd1f55d4795f31851e71fd07fc81e571c4fb7429d45f637539cf95e6a135e63d5ec9ed1e42a84ee606eabe02a18407aa52896942cf6a60d011dc5d7cf3b6a55c9408144b26462f67ee24c7c10717fc3a8808cc37113155d2a26b0700a45f88c75f834bc935cffd44b1e7b7ead5a6b60a79118fe13b5561900526961e2f537ee9715b8510d82e2bbc5fb366e0d9bddba42a26e8f38dda3ecc15c3bb5acdb091d014fdeac2e03e184ec817e20e26dc8082b43", 0xd4, 0x81)
ftruncate(r3, 0xfffffffffffffff7)
close(r2)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:10:08 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700000000fffffffffffffffd00", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:08 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:10:08 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0xfffffffffffffd7f, 0x3, 0x1, 0x88, 0xc7, 0x0, 0x2, 0x5570d, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x8, 0x401}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:08 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2435.093847] loop5: detected capacity change from 0 to 40
[ 2435.128672] loop2: detected capacity change from 0 to 40
[ 2435.301739] syz-executor.2: attempt to access beyond end of device
[ 2435.301739] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2435.303546] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2435.368978] syz-executor.5: attempt to access beyond end of device
[ 2435.368978] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2435.370713] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:10:08 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x165902, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
fstat(r1, &(0x7f00000002c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={<r3=>0x0}, &(0x7f0000000280)=0xc)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000002}, r3, 0x4, r2, 0xa)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000480))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r4 = accept(r2, &(0x7f0000000340)=@nl, &(0x7f00000003c0)=0x80)
getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8)

12:10:08 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fallocate(r1, 0x8, 0x8, 0xb9)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:08 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:08 executing program 0:
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip_vti0\x00', <r1=>0x0, 0x10, 0x7800, 0x5, 0x1, {{0xe, 0x4, 0x1, 0x2a, 0x38, 0x67, 0x0, 0x86, 0x0, 0x0, @local, @empty, {[@timestamp={0x44, 0x8, 0xdb, 0x0, 0xe, [0x40]}, @end, @timestamp={0x44, 0x18, 0x1e, 0x0, 0x4, [0x81, 0x1, 0x9, 0x10001, 0x1]}]}}}}})
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
syz_io_uring_setup(0x2fba, &(0x7f0000000400)={0x0, 0xdb51, 0x0, 0x3, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, 0x0, 0x100)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:10:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:10:09 executing program 1:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r2 = syz_io_uring_setup(0xfffffffc, &(0x7f0000000940)={0x0, 0x400023d5, 0x0, 0x3, 0x2000316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
ftruncate(r4, 0xfffffffffffffff7)
close(r3)
readv(r0, &(0x7f0000000800)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000140)=""/105, 0x69}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000680)=""/115, 0x73}, {}, {&(0x7f0000000700)=""/230, 0xe6}], 0x9)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x113d7, 0x10, 0xfffffffc, 0x18, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), 0x0)

[ 2435.752128] loop2: detected capacity change from 0 to 40
[ 2435.764585] loop5: detected capacity change from 0 to 40
12:10:09 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
r3 = pidfd_getfd(r1, r2, 0x0)
preadv2(r3, &(0x7f0000000640)=[{&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/253, 0xfd}, {&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/108, 0x6c}], 0x7, 0x5, 0x2, 0x10)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2436.055092] syz-executor.2: attempt to access beyond end of device
[ 2436.055092] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2436.056813] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2436.060757] syz-executor.5: attempt to access beyond end of device
[ 2436.060757] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2436.062617] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2449.629323] loop5: detected capacity change from 0 to 40
[ 2449.630960] loop2: detected capacity change from 0 to 40
12:10:23 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000002c0)={0xfeff, 0x3ff, 0x101})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r1}, './file1\x00'})
sendfile(r2, r0, &(0x7f0000000280)=0x5, 0x9a6)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:23 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000200))
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:23 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ftruncate(r2, 0xfffffffffffffff7)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1c400, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_open_dev$sg(&(0x7f0000000140), 0x8, 0x40040)
r3 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r3, 0x0, 0x3)
close(r3)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:10:23 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:10:23 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000462de4788c3b115b0e0494affffff7f00000000004000c5697dfc", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'rose0\x00'})
r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x6, 0xfc, 0x2, 0x0, 0xffffffffffff2b21, 0xa2487, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_config_ext={0x7fff, 0xdd}, 0x10080, 0x5, 0xffffff7f, 0x8, 0xc2d, 0xec, 0x7fff, 0x0, 0x101, 0x0, 0x7}, 0x0, 0xd, 0xffffffffffffffff, 0x8)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r2, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r2, 0xe, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4, 0x20, 0x5, 0x80, 0x0, 0x2, 0x2001, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x46282, 0x100, 0xb1, 0x8, 0xfffffffffffff6a9, 0x401, 0x2, 0x0, 0x2, 0x0, 0x8}, r2, 0x10, r1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000002000000000000000b91eee8553977c6308e7e2f302b72a6f790b10cb68d6b5a9eebc7f9f2d4385ed7ca228de1c523a123ed6982b4aff8505f8e87db234198995ce55f4d03ab98a8403cd3d3feba79b0425fe1012f5ce6e2c82698c2f6243a67b44c3f361fc57"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r4, 0x0, 0x3)
fcntl$dupfd(r0, 0x406, r4)

12:10:23 executing program 0:
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:10:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[ 2449.670267] loop6: detected capacity change from 0 to 40
[ 2449.681658] FAT-fs (loop6): bogus number of reserved sectors
[ 2449.682056] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2449.684320] syz-executor.2: attempt to access beyond end of device
[ 2449.684320] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2449.685599] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2449.704537] syz-executor.2: attempt to access beyond end of device
[ 2449.704537] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2449.705289] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:10:23 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2449.780759] syz-executor.5: attempt to access beyond end of device
[ 2449.780759] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2449.781805] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2449.814272] syz-executor.5: attempt to access beyond end of device
[ 2449.814272] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2449.815450] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:10:23 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r3, 0x0, 0x3)
dup3(r3, r1, 0x80000)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2449.925225] loop2: detected capacity change from 0 to 40
12:10:23 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, @out_args}, './file1\x00'})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x5, 0x1, 0x0, 0x0, 0x72a, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x524e2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0xfffffffe, 0x0, 0x1000000000000}, 0x0, 0xffffffbfffffffff, r0, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r5 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r5, 0x0, 0x3)
dup3(r2, 0xffffffffffffffff, 0x80000)
fsetxattr$system_posix_acl(r4, &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="00008000"/16, @ANYRESOCT=r5, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
bind(r4, &(0x7f0000000280)=@in6={0xa, 0x4e24, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000300)=@isofs_parent={0x14, 0x2, {0x9, 0x7, 0x7, 0x4c3, 0x1, 0xe9}}, 0x0)

[ 2450.053719] syz-executor.2: attempt to access beyond end of device
[ 2450.053719] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2450.054879] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2450.078125] syz-executor.2: attempt to access beyond end of device
[ 2450.078125] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2450.079084] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:10:39 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:10:39 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x1, 0x56, 0x0, 0x0, 0x5, 0x20000, 0x11, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41d, 0x1, @perf_config_ext={0x5, 0xfc7}, 0x8006, 0x40, 0x3f, 0x2, 0x95, 0x0, 0x2, 0x0, 0x6, 0x0, 0x101}, 0xffffffffffffffff, 0x0, r0, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:39 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0)
fcntl$dupfd(r1, 0x406, r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:39 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x8000000, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0x6e, &(0x7f00000019c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/163, 0xa3}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000680)=""/107, 0x6b}, {&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000780)=""/87, 0x57}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000300)=""/40, 0x28}, {&(0x7f0000000800)=""/160, 0xa0}], 0x9, &(0x7f0000001a80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x20, 0x1, 0xdb, 0xff, 0x0, 0x6, 0x48801, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x4, @perf_config_ext={0x9, 0x5}, 0x4014, 0x1, 0x1f, 0x4, 0x5, 0x7, 0x2, 0x0, 0x7, 0x0, 0x81}, r1, 0x3, r2, 0xa)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r5 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r5, 0x0, 0x3)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000540)={0x0, 0x7ff, 0x80000001})
fallocate(r4, 0x0, 0x0, 0x87ffffc)
ftruncate(r4, 0xfffffffffffffff7)
close(r3)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:10:39 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:10:39 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0xa0f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xe)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xfb, 0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x4a8, 0x6, 0x2, 0x0, 0x100000000, 0x10001, 0xfffe, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x7, r2, 0x9)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:39 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000280))
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000200))
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2466.504213] loop6: detected capacity change from 0 to 40
[ 2466.511443] FAT-fs (loop6): bogus number of reserved sectors
[ 2466.512240] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2466.531695] loop2: detected capacity change from 0 to 40
[ 2466.535973] loop5: detected capacity change from 0 to 40
[ 2466.607221] syz-executor.2: attempt to access beyond end of device
[ 2466.607221] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2466.608291] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2466.617237] syz-executor.2: attempt to access beyond end of device
[ 2466.617237] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2466.618218] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:10:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2466.707205] loop2: detected capacity change from 0 to 40
[ 2466.739790] syz-executor.5: attempt to access beyond end of device
[ 2466.739790] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2466.741603] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:10:40 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700000000000000000000000000c04698fe8c4f89593e6536be80efb280f561e6f6513568629440f586e58f4abb0fcb2c9eb574f9b8a284e90ec23a04999b83fecbea5a0648cf7b138e722ded41dda5ad2d6b022881c079af1562f5416e8b3e9f6b4108cd49a198858b266a4d4ea81f0e71506ebba38eb0eec64b01885b5164afa31b576f041b39227655f5380df5d8df1b25839ed8621ab102158ec22721a9e031116ea4e2fe1797d5", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x2c, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x8)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000240)=""/62)

12:10:40 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = gettid()
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x6, 0x20, 0x4, 0x0, 0x2, 0x82800, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x98f, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x8400, 0x1, 0x1, 0x6, 0x1ff, 0x9, 0x101, 0x0, 0xffffeb43, 0x0, 0x27}, r1, 0x9, r0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:40 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x7, 0x4, 0x3, 0x3, 0x0, 0x7, 0xa00, 0x96ceea71c76ce8b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000240), 0x7}, 0x104a, 0x7, 0x1, 0x0, 0x6, 0x7fff, 0x98, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xb, r1, 0x4)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
dup2(r0, r0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r4, 0x0, 0x3)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=<r5=>0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x3f, 0x4, 0xc1, 0x0, 0x0, 0x80086, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc95, 0x2, @perf_config_ext={0x7, 0x8}, 0x1108, 0x5, 0x6, 0x9, 0x1, 0x8001, 0x7ff, 0x0, 0x1}, r5, 0xf, r6, 0x14)
ftruncate(r4, 0x52a1)

[ 2466.908983] syz-executor.2: attempt to access beyond end of device
[ 2466.908983] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2466.910948] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:10:40 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x3, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000009c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0400000000000000100002000000007d0500000000000000eff9e40a59e80000a8d53cd22c5238ff6c0d86167a198fdf702ad9bab0dccd699d9f6219f6d182ed3a7ecb36c9ff4cfe3a3bb1ed6ca3d0f734b5acfb737c2de70aeb6088a1956a8fb9d8896d5c484fe3ffd1bd0772635ea37beb9d3b6113ddebaea5dc6ea665c52a40e46e25b1d95a9dc2a2f3783cd0050746c7805800f71c13f43b5a26ed1dad229537eb1b9e197bc77461b5abfe7d42fbfea50c61c1dc471490920db34764a5b87b7e96f04bd45094d523d23820447b6dfed8cee420116e2fb8fad2d54102670000000000"], 0x2c, 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r4, 0x10, 0x0, 0x7000)
write(r2, &(0x7f0000000080)="01", 0x41030)
write$binfmt_aout(r1, &(0x7f0000000280)={{0x10b, 0x5, 0xa8, 0x3c2, 0x3c8, 0x0, 0x17f, 0x8167}, "ff1c7f619ade3cf01b3a947c40fcd37db958eedce40f44", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x637)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1f9, 0x8, 0xfff, 0x0, 0x8, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
openat(r1, &(0x7f0000000200)='./file1\x00', 0x400840, 0x1)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:10:40 executing program 1:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ftruncate(r2, 0xfffffffffffffff7)
r3 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r3, 0x0, 0x3)
ftruncate(r3, 0x1)
ftruncate(r0, 0x4)
close(r1)
r4 = fsmount(r1, 0x0, 0x6)
syz_io_uring_setup(0x4347, &(0x7f0000000080)={0x0, 0x13d7, 0x20, 0x1, 0x1b, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000440), 0x0)

12:10:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
io_submit(0x0, 0x30, &(0x7f0000001340))
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000180))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080))
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x3f, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="f4ed7efa4f5d1dbf13871d905fbbd6e0759a31107dad1332f0cdbf269bf113ed3d06d6", 0x23, 0x7}, {&(0x7f0000000340)="71b945737c159b720c7729a2c23adef6c897404ffaee5b26bea234a42f51f573d1ff8507e2b8e0db893c8057c047dafaa1385c52f5a806dcf5ea0ab8e8afafd3ab0fb53fe5f43c5b0f75034e91256cbc7d34ffd25b5f62a4f25b9611ad649a3e912ffa32e63aab2b1ca57e8bd412eb929a92df35222751affdcdabfb8a13ad590f8ceb653a627a54b56cec51bcb3e2464f6d4bf142e5f59a8bac035af8f71422", 0xa0, 0x3}, {&(0x7f0000000400)="bf01f5da2731c824195749e81d849a718ee6c678e94889d331a51f011b5a9713308e508aa8432f22078bb56941c49c246e267919ee34f7176779edfd23ff535421aa14d11674a8a2164a6bbc", 0x4c, 0x57c}], 0x808c0, &(0x7f0000000500)={[{@nodots}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@obj_type}, {@obj_role={'obj_role', 0x3d, '\'\xcb.['}}, {@context={'context', 0x3d, 'root'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@smackfshat={'smackfshat', 0x3d, '*+)@'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2467.173484] loop5: detected capacity change from 0 to 40
[ 2467.333133] syz-executor.5: attempt to access beyond end of device
[ 2467.333133] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2467.334834] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2467.358682] loop3: detected capacity change from 0 to 5
[ 2467.358834] syz-executor.5: attempt to access beyond end of device
[ 2467.358834] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2467.360938] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2467.370108] =======================================================
[ 2467.370108] WARNING: The mand mount option has been deprecated and
[ 2467.370108]          and is ignored by this kernel. Remove the mand
[ 2467.370108]          option from the mount to silence this warning.
[ 2467.370108] =======================================================
12:10:40 executing program 0:
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:10:40 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r1, @ANYBLOB="1f447c2990ee57d5c13c2747e32c914a31b13090ef09148890e5dc1859f92f1c8979a6321ee6daa930be941cc2e2e535bcc4997a78827a2b8d2d8364ae903c5c7255fa9b5adb7f42e56af6c3794b1bd1d342af27ff546f58275212fe0000000000000000"])
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x60)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6feb1f858c641db26780aeea81c1b5d901859cde4128a2b3992be2a57ca3d78b6f48a9836bcdc44bedf653f15e996a6fb590020faddb50a48adf65fcf004a44562ca58c04dbb511588bd6fa9011bac46975cfd88eea237216efd39ad8d778baf3fc1c7cd2f69abf8b218e2ea3d0dc400cc3ae65d0feb05be7aa854408c3b3601ec65f06c1dbb9f532fcf2ada46e70250a147276b8451c27c5c4be62a2423c", @ANYRES32=0x0, @ANYBLOB='\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00'], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
write(r0, &(0x7f0000000440)="5590d7f393ca88b3d76e19511a21cb6739bb31aa81dc3e1705d551e44ad63ff8464387a913a0021109a9b5eedf6869c5f35b5204b4674dcce88649aba2e8be0b2ee831ef5d5cb8c05b9af6ac0ecd48e33af59d98889ee3b1779fe38345c0947d4010c523595ce1e6b208fc5eb27c49bec33bfb1af2b3db28bb19ce4a69a11cc3e93b571207ce7e663eb050a5f55835d86619b76926bdb56d26adae8f89756e76b0bb3d61287c1594d0efee8e4c75", 0xae)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
lseek(r3, 0x0, 0x3)
r5 = memfd_secret(0x80000)
signalfd4(r5, &(0x7f0000000240)={[0x2]}, 0x8, 0x800)
openat(r4, &(0x7f00000002c0)='./file1\x00', 0x2000, 0x1)

12:10:40 executing program 1:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r1, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r1, 0xe, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xfd, 0x0, 0x3f, 0x2, 0x0, 0x59, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000080)}, 0x8000, 0x101, 0x0, 0x3, 0x8, 0x3, 0x2, 0x0, 0x4, 0x0, 0x2}, r1, 0xe, r0, 0xa)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r2 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
r5 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x2000)
ftruncate(r5, 0xfffffffffffffff7)
close(r3)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:10:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[ 2467.444997] loop2: detected capacity change from 0 to 40
[ 2467.474242] loop3: detected capacity change from 0 to 5
[ 2467.508721] loop5: detected capacity change from 0 to 40
[ 2467.590523] syz-executor.5: attempt to access beyond end of device
[ 2467.590523] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2467.591582] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2467.596966] syz-executor.5: attempt to access beyond end of device
[ 2467.596966] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2467.598090] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2467.602696] syz-executor.2: attempt to access beyond end of device
[ 2467.602696] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2467.604658] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:10:54 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r1, 0x0, 0x3)
openat(r1, &(0x7f0000000000)='./file1\x00', 0x0, 0x10)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
ftruncate(r3, 0xfffffffffffffff7)
close(r2)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:10:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2480.821793] loop5: detected capacity change from 0 to 40
12:10:54 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
r2 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r2, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r2, 0xe, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000100)={0xffffffffffffffff, 0x80, 0x3, 0x7a, 0x88, 0x6, 0x0, 0x7f, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000280), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x80000007, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, r2, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:54 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, r1, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/auxiliary', 0x2, 0x100)
setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000200), 0x2)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:10:54 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x22000, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r0, 0x0, 0x3)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:54 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="0400000000000000002000000000000000"], 0x2c, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'})
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x7, 0x20, 0x4, 0x0, 0x0, 0x200, 0x173b08, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0xfff, 0xfffffffffffffff8}, 0x21, 0x8, 0x5ac3, 0x1, 0x9, 0x112, 0x81, 0x0, 0x10001, 0x0, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:10:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[ 2480.843033] loop6: detected capacity change from 0 to 40
[ 2480.846070] loop2: detected capacity change from 0 to 40
[ 2480.858674] FAT-fs (loop6): bogus number of reserved sectors
[ 2480.859098] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2480.973497] syz-executor.5: attempt to access beyond end of device
[ 2480.973497] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2480.974495] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2480.989884] syz-executor.5: attempt to access beyond end of device
[ 2480.989884] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2480.990962] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:10:54 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010008dae000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x6, 0x1, 0x5, 0x0, 0x0, 0x9, 0x40000, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x87, 0x0, @perf_config_ext={0x6, 0x2}, 0x1, 0x9, 0x47, 0x3, 0x1, 0x5, 0x1, 0x0, 0x8, 0x0, 0x80000001}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
r2 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r2, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r2, 0xe, 0xffffffffffffffff, 0x3)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x9, 0x1a, 0x0, 0x0, 0x0, 0x20, 0x89080, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x10000, 0x8}, 0x4, 0xfc7a, 0x60, 0x7, 0x8, 0x73c1, 0x1, 0x0, 0xb67, 0x0, 0x2}, r2, 0x10, r3, 0x8)

[ 2481.000819] syz-executor.2: attempt to access beyond end of device
[ 2481.000819] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2481.002888] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:10:54 executing program 7:
r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1984, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a65707000000000000000000007b0000828ef9c614cdc1428431ecb42870dd062d63b10861640071857074952c677299f8fc79661370d807e43022a03bcd03bfb3c33f4cadba3dc2d6e1fad6c9f7ba9e43b2a53522306be3e7bbd81061d9ce45728e3ffb106cf8db8acba2d9d60e33e2b15671273a981d03ce5d983f9699518c2456b327a0e1f67eb8d146a4b2e12b88b1fc70e592af25eb2c1f6aa0d8bb22", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2496.927200] loop6: detected capacity change from 0 to 40
12:11:10 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:11:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:11:10 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
open_by_handle_at(r2, &(0x7f0000000200)=@fuse={0xc, 0x81, {0x7f, 0x55dc023, 0x5}}, 0x800)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:10 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
syz_io_uring_setup(0xf91, &(0x7f0000000140)={0x0, 0x7d39, 0x8, 0x3, 0x258, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000200), &(0x7f0000000240))
ftruncate(r2, 0xfffffffffffffff7)
stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080))
close(r1)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:11:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:11:10 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x8, 0x100)
sendfile(r1, r0, &(0x7f0000000100)=0xa79, 0x20)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000240))
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r4, 0x0, 0x3)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000140))
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
r6 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r6, 0x0, 0x3)
mknodat$null(r6, &(0x7f0000000280)='./file1\x00', 0x8000, 0x103)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)

12:11:10 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = io_uring_setup(0x78f0, &(0x7f00000002c0)={0x0, 0xd797, 0x20, 0x1, 0x351, 0x0, r1})
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESOCT=r1], 0x2c, 0x0)
r3 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r3, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r3, 0xe, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x3, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x6f34e150883da733, 0x8, 0xfff, 0xdf73eec86ece8f45, 0x2007, 0xf83, 0x6, 0x0, 0x8713, 0x0, 0x30000000000}, r3, 0x8, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r4, 0x0, 0x3)
r5 = fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1)
sendfile(r4, r5, &(0x7f0000000280)=0xb521, 0x1f6d)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:10 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "3ec9b71965ed530b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2496.946962] loop5: detected capacity change from 0 to 40
[ 2496.950405] FAT-fs (loop6): bogus number of reserved sectors
[ 2496.950834] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2497.016398] loop2: detected capacity change from 0 to 40
[ 2497.061017] syz-executor.5: attempt to access beyond end of device
[ 2497.061017] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2497.062067] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:11:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[ 2497.181882] loop5: detected capacity change from 0 to 40
12:11:10 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r3, 0x0, 0x3)
fcntl$dupfd(r3, 0x406, r0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2497.284791] syz-executor.2: attempt to access beyond end of device
[ 2497.284791] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2497.286382] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:11:10 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x0, 0x7}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x802, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r3, 0x0, 0x3)
fstat(r3, &(0x7f0000000200))
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ftruncate(r2, 0xfffffffffffffff7)
close(r1)
syz_io_uring_setup(0x4348, &(0x7f0000000480)={0x0, 0x13d7, 0x2, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)
pipe2$9p(&(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x800)
pwritev2(r4, &(0x7f0000000180)=[{&(0x7f0000000680)="b2dc51586d704d95c353d83038653ad0e523ec3f5c4c50c48059105c6db52cc106ef0b97894f19815ce9380a268ca8232d1e0b8eb168b1ad66745e7c39f08b997b5fc0d32e24177d4c238a3ab28d723678bc32e99099d1a87d10fe9051c239b9d0cce132a419d0bc3ba8ddaa4fcdf7c263623af477707112c186dde2871e1b102c3bbfe6ceafc3432e4993f32f996a46", 0x90}, {&(0x7f0000000740)="371f51d4452db78e49561a6deb114817087027e6867e4c55179630575076e7db4adf2d854e0292376d1d541e90ec0a185f109b68b2e014535d2162b663337dab72c57fa2e5dae85abd79772d031f31b65741fde737ba28669449a67257e1ad3a5f3fdb0e5e30ba8cd72de46b6f56693dc6ef8896c68bba258458ab830e07607da589201619ce6b3cc879150170f1376f729140334cf0db91bbb548f3045c2f5b65040d661cde6ccf62", 0xa9}, {&(0x7f0000000140)="b3f44d814d95a6b62dd786863bc0d8c36169ad4f6b2916279226dded1cb09691671dfc3e0b321badbda3a375cb4a85bb46ca", 0x32}], 0x3, 0x7, 0x6, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)

12:11:10 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000300)=""/105, 0x69}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000003c0)=""/35, 0x23}], 0x5, &(0x7f0000000480)=[@rights={{0x24, 0x1, 0x1, [<r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x12000)
fcntl$setownex(r1, 0xf, &(0x7f0000000500)={0x1, 0xffffffffffffffff})
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
write(r0, &(0x7f00000001c0)="dc43ba5208f8964429446ba1a36250448d3aad9d4deaca0d122f3e8d126084c20e591987eae80cc7650ce454d9af9c41225a4532a3ea4ff8e77fa286bed29d014283d252865af7c2bdd253fd0392a09e46323e18065d67e653072451ef4d683c93fe9226651724df035b8a680bb66b7ca59c866bfa40d77e311a3fdbfa8e198ece3e7ec4d4ead2c293e34b0905d5624a30154d9b6e75ce57bc54ef03049f92be637d91fdfa5bad998bf548901d299b27c7d9679ade590dc46331c7d3523c6f3eaca398af5a3aaf87361906606498c0f40e748dcd1f4dee4307f6622cedf17bb0a819e9ec139ba159875a", 0xea)

12:11:10 executing program 7:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file1\x00'})
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={<r4=>0x0}, &(0x7f00000002c0)=0xc)
r5 = pidfd_getfd(r1, r3, 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x5, 0x1, 0x81, 0x4, 0x0, 0x0, 0x90002, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffe000, 0x5, @perf_config_ext={0x6, 0x7}, 0x17001, 0x80, 0x2, 0x1, 0x100000001, 0x2, 0x3ff, 0x0, 0x8, 0x0, 0xa8}, r4, 0xa, r5, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040800fc487a01000000000000000000000000000000000036a9a0cb7c6fab7482a05d345714b0260d48bb2e62d051fc08296b2f8d1e51e591464fe507dfc46c37b0d54e13f55e0e52c5c66f7e0edeb6ee100053c7436e8b7e9119f5fb11baf1fffedef15e241badcdc76dc8a071920493ae9076a1f9a626dfcd5b6e6a035c38bbcff7ef82926b83000000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r3, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000001c0)=0x1)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:10 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f78a6570700000000e8ff00000000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x4, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x9ed, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x20000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x8)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x95, 0x1, 0x81, 0x96, 0x0, 0x3, 0x190, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_bp={&(0x7f0000000200), 0x3}, 0x10002, 0x6, 0x2, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x10001, 0x0, 0xffffffffffff8001}, 0xffffffffffffffff, 0xc, r1, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:10 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000240)={0x6, 0x47, "8bb9cb543c267cb67099012e5f2eb89a77fae41418fcd34bb95ed2cce3bd613f99745ed4823343e55bc40277c5dc083eebcb1685e8732f549154574121ce439cac5b8c99d2bffe"})
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="d9d3e8a5000000000000000000000000bb8ff3ab25a68979ed1ffd4a0b12632e4ec63cf1b38abf", @ANYRES32=0x0, @ANYBLOB="0400000000000000100002000000ba002000000000000000"], 0x2c, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r1}, './file1\x00'})
ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000380)={0x0, 0x0, 0x1})
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000200)={0x5, 0xff})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2497.397694] syz-executor.5: attempt to access beyond end of device
[ 2497.397694] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2497.400238] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:11:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2497.540886] loop2: detected capacity change from 0 to 40
[ 2497.769779] syz-executor.2: attempt to access beyond end of device
[ 2497.769779] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2497.771488] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:11:24 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1efcd800, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x40, 0x3f, 0x2, 0x0, 0x9, 0x20000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x10001, 0xff}, 0x40400, 0x2, 0xd3fe, 0x3, 0x4, 0xfff, 0x3, 0x0, 0xc7, 0x0, 0x10000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x9)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:24 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r2, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r2, 0xe, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x2, 0x6, 0x1, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x1, 0x9}, 0x16a06, 0x80000000, 0x40000, 0x8, 0x3, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x6}, r2, 0xe, 0xffffffffffffffff, 0x8)
bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xe)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0221d500019b45b868f83b3f1d000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x1, 0x4, 0x6, 0x40, 0x0, 0x4f, 0x2, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x16, 0x4, @perf_bp={&(0x7f0000000300), 0x1}, 0xac6, 0x748, 0x9, 0x0, 0x2, 0xbde8, 0x5, 0x0, 0x9}, r2, 0x3, r3, 0xa)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
mount$bind(&(0x7f0000000340)='./file1\x00', &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0), 0x120008, 0x0)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:24 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1f, 0x9, 0xc9, 0x6, 0x0, 0x8001, 0x4000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000200)}, 0x80, 0x7, 0x2, 0x3, 0x5, 0x200, 0x3ff, 0x0, 0xff, 0x0, 0x395}, 0xffffffffffffffff, 0xd, r2, 0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:24 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="d9d3e8a59ec488160acbfa240f89a65707000000000000000000000000001fb07b2a9f391d682e0defa85f9f760a210ff320aae967731257772b35caeb427ff276dd3805975eb20a2c8b9900f24530cf43f71d8eaf707610d847290e35eb3d466b22f26a0ce0126d170604c83cd0b4abf2c0ab9452d88e3940baa34ad7e285b08b12e0ef5a194629daac7f3cee753404614ab74c7690528c5f9084d97219a857dfe6363c9baaccb66c6efd169d501d3d9d9d4db35e8c034e", @ANYRES32=0x0, @ANYRESDEC], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:24 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', <r2=>0x0})
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r2, 0x29, 0xb4, 0x71, 0x401, 0x14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x7800, 0x80, 0x0, 0x5}})
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r4 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x4, 0x3, 0x316, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r6, 0x0, 0x0, 0x87ffffc)
ftruncate(r6, 0xfffffffffffffff7)
close(r5)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:11:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:11:24 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:11:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[ 2510.928127] loop5: detected capacity change from 0 to 40
[ 2510.999306] loop6: detected capacity change from 0 to 40
[ 2511.006017] loop2: detected capacity change from 0 to 40
[ 2511.020215] FAT-fs (loop6): bogus number of reserved sectors
[ 2511.021124] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2511.120237] syz-executor.5: attempt to access beyond end of device
[ 2511.120237] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2511.122238] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:11:24 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000280)={0x2, 0x28, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]})
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:24 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x4800, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000280))
open_by_handle_at(r1, &(0x7f00000002c0)=@OVL_FILEID_V0={0x70, 0xfb, {0x0, 0xfb, 0x70, 0x0, 0xee, "50ee488013eadd72298f8243f766e0a5", "6e8d8d6edaead08468e17cc0d808993ee7d649ff73b28bf42cd8803de4d0612f61dc094d71e23c52f89385403ba14d0169d9ac349f4d19c738839992dff4e7fb2e1add30034c852a4d951b92cba46440fc279dddd8ccdcab7af261"}}, 0x101440)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2511.265744] syz-executor.2: attempt to access beyond end of device
[ 2511.265744] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2511.267548] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:11:24 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:24 executing program 0:
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f00000001c0)={&(0x7f00000015c0)=""/4096, 0x1000, 0x7b, 0x200})
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7fe8}, 0x0, 0xfffffffffffffffd, 0x580, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x6, 0x40, 0x8, 0x3ff, 0xc, "2178c8a0eeba23c3"})
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
r3 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES32])
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
r5 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r5, 0x0, 0x3)
ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000200)={0x1, 0x4})
lseek(r4, 0x0, 0x3)
lseek(r3, 0x0, 0x3)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="000000000000001b2e2f66696c5d3000"])
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x80, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x800, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x1a)
write$cgroup_pid(r0, &(0x7f0000000240), 0x12)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[ 2511.490148] tmpfs: Unknown parameter '0x0000000000000003'
12:11:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2511.552161] loop5: detected capacity change from 0 to 40
[ 2511.563242] tmpfs: Unknown parameter '0x0000000000000003'
12:11:24 executing program 1:
r0 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r0, 0x0, 0x3)
ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000300)={0x3, &(0x7f0000000200)=[{0xccb4, 0x82, &(0x7f0000000480)="aae97e8d64568745de89ac3d72d6bbd46ec179a2af17a33c26e76d8c0823375df8168b1c010753a20c466a282c750659f4ab480e9e3f7a5e2d514dcabc9404702824a25d08d9fdd1b3e869c416070cfd9e095ec474ea8aaed26059eb5ba2d17fd597355f9668145bfe470ae53beda723cc809b1710d8031b63a4d40e467116457861", 0x1, 0x1}, {0x1, 0x0, &(0x7f0000000180), 0x0, 0x1}, {0xd9c, 0x1000, &(0x7f00000009c0)="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", 0x1, 0x1}]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r1 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
ftruncate(r3, 0xfffffffffffffff7)
close(r2)
syz_io_uring_setup(0x4914, &(0x7f0000000080)={0x0, 0x7513, 0x4, 0x2, 0x6a, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140))
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

[ 2511.592358] loop2: detected capacity change from 0 to 40
12:11:25 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000300)={0xfa0, 0x9161, 0xfff, 0x0, 0x0, 0x6, 0x1}, 0xc)
r2 = epoll_create(0x1)
r3 = socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x60000017})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f00000003c0))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
sendmsg$nl_netfilter(r6, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x150, 0x1, 0x5, 0x3, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x8}, [@typed={0x8, 0xe, 0x0, 0x0, @fd=r4}, @nested={0x131, 0x79, 0x0, 0x1, [@typed={0xe, 0x93, 0x0, 0x0, @str='/dev/hpet\x00'}, @typed={0xc, 0x66, 0x0, 0x0, @u64=0x6}, @typed={0xb, 0x86, 0x0, 0x0, @str='}@!\\\xc2/\x00'}, @generic="53b5a8dda08ea3a5331cf42e3fc25020401cfd24b52acab7d5bb43bed6c7b19a248a1518201a93d089bf8767bebbc7664a85a08d37b07c7e6648f261aefbfd429095dd93656215e6feb638d2843376ed25503eac3be3856562431603200b2c24811b0800929cdb652327d3b750510b8160b3eb27fbcd517c3847ce4f7a921325b776ea35a0acd74fa16d39f92e229258178aa4d0ac94a78cb835ae0af71b04d79d24dd9049992acd8300273e1c1cc0e12a8ba0c73a074e3c58d8a002518cd8771dfb3b0c509674be", @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="342cf5515202ad9d704d6549e473af6d7a", @typed={0xc, 0x74, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0x5c}, @typed={0x8, 0x19, 0x0, 0x0, @fd}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x2000}, 0x4040000)
epoll_pwait(r2, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000340)={0x40000000})
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x149000, 0x0)
sendmsg(r7, &(0x7f00000002c0)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)="c5a163af48226f0e59af2663519e25f44b8b655942f7c93437d317ae7252c6269e2702cf1f6bfbaebfe08604b5a5ade8fbb1382467aa2857ec18f86cbd6b32e2", 0x40}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="58000000000000001100000006000000e69c1be2f3e0256e7e2a0894e47f856b2eb8da7015be2f575d8ed15e2d80d5fea207e6b4200dad454be2426a2ccf1037937a00f307a0b00c53e6e9fbce77412046df8812e75ed62561d8b30842eb2a10b02ed30000000000"], 0x58}, 0x894)

[ 2511.743994] syz-executor.2: attempt to access beyond end of device
[ 2511.743994] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2511.745947] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:11:25 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040)}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2511.785648] syz-executor.5: attempt to access beyond end of device
[ 2511.785648] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2511.787465] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:11:25 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3, 0x1f, 0x8, 0x3f, 0x0, 0x93, 0x8100, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000280), 0x9}, 0x4018, 0x2, 0x0, 0x1, 0x4, 0x6, 0x7f, 0x0, 0x48000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:25 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x711180)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000015c0)={0x0, 0x0, "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", "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"})
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000000000000002038ff0000000200007e6f"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r3, 0xa)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r4, 0x0, 0x3)
fcntl$dupfd(r2, 0x406, r4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
chroot(&(0x7f0000000480)='./file0\x00')
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:40 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x26, &(0x7f0000000200)=0x10000)

12:11:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:11:40 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x5, 0xff, 0x1f, 0x6, 0x0, 0x18, 0x4800, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x80, 0x1f}, 0x0, 0x4, 0x7fff, 0x1, 0x9, 0x2, 0x9, 0x0, 0x8, 0x0, 0xc4}, 0xffffffffffffffff, 0x5, r0, 0x3)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:40 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_io_uring_setup(0x2fba, &(0x7f0000000400)={0x0, 0xdb51, 0x8, 0x3, 0x75, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, 0x0, 0x100)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0)
syz_io_uring_submit(r3, r5, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r1, 0x0, &(0x7f0000000000)='./file1\x00', 0x88, 0x2, 0x23456}, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r6, 0x0, 0x0, 0x87ffffc)
ftruncate(r6, 0xfffffffffffffff7)
close(r1)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:11:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:11:40 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
r2 = perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(r1, &(0x7f0000000940)={&(0x7f0000000300), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000600)=""/148, 0x94}, {&(0x7f00000006c0)=""/122, 0x7a}, {&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000000740)=""/206, 0xce}], 0x7, &(0x7f00000008c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x40002000)
read$snapshot(r3, &(0x7f0000000980)=""/95, 0x5f)
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x7f, 0x1b, 0x80, 0x7f, 0x0, 0x7c, 0x42010, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x72, 0x101}, 0x10000, 0xaca, 0x4, 0x6, 0x9, 0x1441, 0xffe0, 0x0, 0x2, 0x0, 0xfffffffffffff001}, 0x0, 0x7, r2, 0x3)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:40 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x10000}}, './file1/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file1\x00'})
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r2, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd_index=0x7, 0x34b, 0x1, 0x5, 0x4, 0x0, {0x3}}, 0xffff)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x30001)
syz_open_procfs(0x0, &(0x7f0000000200)='personality\x00')

12:11:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[ 2526.715712] loop6: detected capacity change from 0 to 40
[ 2526.737126] FAT-fs (loop6): bogus number of reserved sectors
[ 2526.737938] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2526.741607] loop5: detected capacity change from 0 to 40
[ 2526.744806] loop2: detected capacity change from 0 to 40
[ 2526.949760] syz-executor.2: attempt to access beyond end of device
[ 2526.949760] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2526.951674] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:11:40 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
getsockname(r1, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000200)=0x80)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:40 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000001c0)={0x81, "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"})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x5c9402, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x1}, 0xe)
dup(r0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000140), &(0x7f0000000400)=0x4)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2526.987855] syz-executor.5: attempt to access beyond end of device
[ 2526.987855] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2526.989967] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:11:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:11:40 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x3, 0x0, 0x0, "2f08003fb6d90993"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:40 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="04000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
sendfile(r2, r0, &(0x7f0000000200)=0x6, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2527.143811] loop2: detected capacity change from 0 to 40
12:11:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:11:40 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x100, 0x1)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2527.386763] loop5: detected capacity change from 0 to 40
12:11:40 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
write(r0, &(0x7f00000001c0)="c1ef30e9f937306b6fc35d1f51fa6d53c932f09d748eb922febc4eddba965ea9ad588858d74d986c4ae762a8df897610baa2312a64133955c321f36f7593cb58a307644631560ac4dfb8e78d305e012a132934077d7dc7ff58e2132d0fec0cad66cc4fe97b625a06f92118e948511b3915dea8d7f15a5b38b463cbf3ce471cb861706790e134e603c9da872f97e0a84ca9dd8f480449bd6a568a7fef7587ed7685c50e9c779d4a1e8aecde902ea9482d5970490844ef88a91664ed0a6f98da452dbacbdb440bb32ad3fe37d882f41aed90aa233a9b", 0xd5)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:40 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
name_to_handle_at(r1, &(0x7f0000000200)='./file1\x00', &(0x7f0000000280)=@OVL_FILEID_V0={0xea, 0xfb, {0x0, 0xfb, 0xea, 0x3, 0x4, "f49ad908faff335e5c8c7a9546106c93", "02d5b75086ee2a8a05b46009683d699eb52dfaa05c859c9e6fa99ea4c48e8f6cbd788a8b3b761af078f5f0d4903a5687a62178741e27cf1fbf71d3a8d74261fca75b4f7b280faef65d842fda5a82f5055c728653229d711224e5e827aa2591ceefc074854c05c4da20da16fd7d394f1a4a223555415cfa94de8edd85214f794cddab46f647b9205e3e798894bbc9287cd8afd645a036996c8d219ee2bcb246be414f936351a51c929b9c39e3e8638075bd1a5ed7d82d346c5aeefb8df2ed5262bec708c65692b4f4ca2b2e3b09131a56ae9a4bc5a3"}}, &(0x7f0000000380), 0x400)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:40 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000340))
getpid()
r1 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
ftruncate(r3, 0xfffffffffffffff7)
close(r2)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6000009, 0x11, r2, 0x10000000)
syz_io_uring_setup(0xdb8, &(0x7f0000000080)={0x0, 0xd5b3, 0x0, 0x2, 0x157, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_submit(r0, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x2007, @fd_index=0x5, 0x2d5, 0x81, 0x401, 0x1, 0x1, {0x3}}, 0x6)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

[ 2527.471969] syz-executor.2: attempt to access beyond end of device
[ 2527.471969] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2527.473815] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2527.629561] syz-executor.5: attempt to access beyond end of device
[ 2527.629561] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2527.631571] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:11:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:11:57 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x2)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:11:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:11:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[ 2544.246278] loop6: detected capacity change from 0 to 40
[ 2544.261083] loop2: detected capacity change from 0 to 40
[ 2544.285027] FAT-fs (loop6): bogus number of reserved sectors
[ 2544.286036] FAT-fs (loop6): Can't find a valid FAT filesystem
12:11:57 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x2)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r1, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r1, 0xe, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="07000000000000002e2f66696c653000a0993d6da87d74052d3fd67c7d15ed95ffc9b4867898162fc624a27eddd2903196c933b2eefa62b807783c724068d163162eeb6303269d8646eb6162cf603517be054b166166dec25a65139a5eab6b17710fd5d81c84c5ff0af0b2f9b61f2f760a90b843d1ac6854aaa58ed9cde847aa950cab08590371c0a36ace70151c6409f652d0f12ba1e7bfba9bead31a079cad46d0f430bcd08a142d96a2f13b6cc9c583777311fbea26c196b0f3064f451a5be786addf29d607eed620dfdbd90667a7c041077a17400871e2"])
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x43, 0x80, 0x3a, 0x7, 0x0, 0x3, 0x12200, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0x2}, 0x182, 0x100000000, 0x2, 0x9, 0xb6, 0x8, 0xf4b3, 0x0, 0x9, 0x0, 0x6}, r1, 0x9, r2, 0x8)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
syz_open_procfs(r1, &(0x7f0000000300)='net/arp\x00')
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
ioctl$VT_DISALLOCATE(r4, 0x5608)

12:11:57 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/126, 0x7e}, {&(0x7f0000001240)=""/209, 0xd1}, {&(0x7f0000001340)=""/49, 0x31}, {&(0x7f0000001380)=""/50, 0x32}, {&(0x7f00000013c0)=""/206, 0xce}, {&(0x7f00000014c0)=""/181, 0xb5}, {&(0x7f00000025c0)=""/24, 0x18}], 0x9, &(0x7f00000026c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r1=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002840)=""/199, 0xc7}, {&(0x7f0000002940)=""/133, 0x85}, {&(0x7f0000002a00)=""/40, 0x28}, {&(0x7f0000002a40)=""/151, 0x97}, {&(0x7f0000002b00)=""/210, 0xd2}], 0x5, &(0x7f0000002c80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002cc0)=""/154, 0x9a}], 0x1, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r2=>0x0}}}], 0x20}}, {{&(0x7f0000002e00), 0x6e, &(0x7f0000004400)=[{&(0x7f0000002e80)=""/93, 0x5d}, {&(0x7f0000002f00)=""/243, 0xf3}, {&(0x7f0000003000)=""/112, 0x70}, {&(0x7f0000003080)=""/62, 0x3e}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/119, 0x77}, {&(0x7f0000004140)=""/254, 0xfe}, {&(0x7f0000004240)=""/178, 0xb2}, {&(0x7f0000004300)=""/203, 0xcb}], 0x9, &(0x7f00000044c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r3=>0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r4=>0x0}}}], 0xb0}}, {{&(0x7f0000004580), 0x6e, &(0x7f0000004700)=[{&(0x7f0000004600)=""/146, 0x92}, {&(0x7f00000046c0)=""/11, 0xb}], 0x2, &(0x7f0000004740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r5=>0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r6=>0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}], 0x5, 0x1, &(0x7f0000004a00)={0x0, 0x3938700})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x8, 0x7f, 0xce, 0x0, 0x2, 0x10701, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x40000, 0x100, 0xfff, 0x6, 0xff, 0x4f, 0x7ff, 0x0, 0xeb, 0x0, 0x1}, 0x0, 0x10, r0, 0x1)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
getgroups(0x4, &(0x7f0000004a80)=[r6, r1, r3, <r8=>r2])
fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000004ac0)={{}, {}, [{}], {}, [{0x8, 0x7, r8}, {0x8, 0x0, 0xee01}, {0x8, 0x4, r4}, {0x8, 0x4, r3}, {0x8, 0x0, r5}], {0x10, 0x2}}, 0x54, 0x0)
ioctl$VT_SETMODE(r7, 0x5602, &(0x7f0000004a40)={0x40, 0x1, 0xe5c0, 0x6ad0, 0x9})

12:11:57 executing program 1:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f0000000680)="adf53b08f1cc74a54f3407cf1f6e30b841f14db39cf64d68b5fd7317235a49a8e8a891466267f3ee4f6e8c7e5c27c7a0ce4c440a3e7c3b194410e7f3aecf3a04d1e31a8b1908e547e316fb3dea0b355c853300add77e1a95a33e8735ca2db5c53b16942b3937bee1acde820aef7071a62905f8f38d5af26826e8a8d34fc08cd00066e16af8565304c6fc5387fec6ad5a3d00576336332457e218eede127b380f02ea5e8529bd0d7dcd92844d29355051ea024aaab181c0740db3ca159f3a92ec1f43fc3b0ead0bc97aa1be78e613b4db5329734581d9745594a9322ec26a2967d3de74a77d014fc824408e6ad4", 0xed, 0x8, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x200, r0, &(0x7f0000000200)="b6547f508ab6ded6d6ec9e313e5d440ef4ef929267df32a76276ee9c54fddc89aa87cae7e68df635beaa2bd37179157045cdb4413c5b151cebef10135766c7c216659f1ac6ae95cab9c669dc8bb7fbf1ae9f4b5ab3ed34b01a23", 0x5a, 0x6, 0x0, 0x2}])
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r1 = open(&(0x7f0000000080)='./file1\x00', 0x8101, 0x84)
r2 = syz_io_uring_setup(0x1, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x2, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
r5 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r5, 0x0, 0x3)
sendfile(r4, 0xffffffffffffffff, &(0x7f0000000000)=0x2, 0xff)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
fstatfs(r6, &(0x7f0000000140)=""/101)
ftruncate(r4, 0xfffffffffffffff7)
close(r3)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x14, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:11:57 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x5, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000340))
r3 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r3, 0x7, 0xffffffffffffffff, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xe)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r3, 0xe, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x81, 0x66, 0x1, 0x4, 0x0, 0x7ff, 0x8200, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x0, 0x81, 0x80, 0x0, 0x0, 0x10000, 0xff, 0x0, 0x80000001, 0x0, 0x2}, r3, 0x4, 0xffffffffffffffff, 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2544.320073] loop5: detected capacity change from 0 to 40
12:11:57 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='@{\x00')
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
rt_sigqueueinfo(0x0, 0x3d, &(0x7f0000000100)={0x1f, 0x80000001, 0xfffffffa})

12:11:57 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200))
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r3 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x88100)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x0, 'veth1_to_bridge\x00', {0x3}, 0x2})
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2544.441114] syz-executor.2: attempt to access beyond end of device
[ 2544.441114] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2544.442455] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:11:57 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
flistxattr(r2, &(0x7f0000000200)=""/3, 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xf}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2544.505924] syz-executor.5: attempt to access beyond end of device
[ 2544.505924] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2544.506980] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:11:57 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160a01fa240f89a657e7cd001cf443b86d000000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000b7ec00000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xff, 0x1, 0x88, 0x81, 0x0, 0x5, 0xdd78d, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x6, 0x5, 0x1337, 0x7, 0x0, 0x10000713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x7, 0x0, 0x7, 0xfd, 0x0, 0x5, 0x80000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc0, 0x4, @perf_bp={&(0x7f0000000200), 0x7}, 0x12814, 0x17fffffff, 0x5927cf29, 0x1, 0x200, 0x7f, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x4, r0, 0x6)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/2247], 0x8cc)

12:11:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2544.607828] loop2: detected capacity change from 0 to 40
[ 2544.766899] syz-executor.2: attempt to access beyond end of device
[ 2544.766899] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2544.767862] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2557.849867] loop2: detected capacity change from 0 to 40
[ 2557.890458] loop5: detected capacity change from 0 to 40
[ 2557.892538] loop4: detected capacity change from 0 to 264192
[ 2557.895087] loop7: detected capacity change from 0 to 264192
[ 2557.895878] nfs: Unknown parameter '.[}'
[ 2557.903970] loop6: detected capacity change from 0 to 40
[ 2557.943261] loop4: detected capacity change from 0 to 264192
12:12:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:12:11 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x40, 0x7f, 0x1, 0x80, 0x0, 0x9, 0x624c0, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x2b0, 0x1, 0x6, 0x6, 0xffff, 0x8000, 0x3f, 0x0, 0x7, 0x0, 0x2000000}, 0xffffffffffffffff, 0x7, r0, 0x9)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0xd2, 0xd9, 0x8, 0x1b, 0x0, 0x800, 0x1000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x8, 0x100}, 0x40120, 0x9, 0xffff, 0x5, 0x5, 0x99, 0x7, 0x0, 0x9, 0x0, 0x3f}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r1 = creat(&(0x7f00000001c0)='./file1\x00', 0x54)
ioctl$FIOCLEX(r1, 0x5451)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f00000015c0)={0x40c, 0x81, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

12:12:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:12:11 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
[ 2557.978122] FAT-fs (loop6): bogus number of reserved sectors
[ 2557.979028] FAT-fs (loop6): Can't find a valid FAT filesystem
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ftruncate(r2, 0xfffffffffffffff7)
close(r1)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:12:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:12:11 executing program 3:
copy_file_range(0xffffffffffffffff, &(0x7f0000000200)=0x6, 0xffffffffffffffff, &(0x7f0000000280)=0x1, 0xffffffffffff7fff, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="0427831d5c00000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:12:11 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000280)='./file1\x00', 0xffffffff80000000, 0x1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="70c39ab2ef0202145351bec6117bd427da09e96da5ba74d4ee8f66e651e495267eb7da3e5cd39a7e869c2af68e1b37f57fa58043b12bb41939a4af8dc39240d85a2ed5b04e4d71effc0ff355134cccf5b6f5b47f8f9bee498e9b268dce0395f3e15b95b9a54df5b1143761c97514b850be7f595e09d463679f3064104524713087e2eeb5716c9ba38fc3428eeb49b1adf5bdeb45e2117de48f24f8a741c4c8c81dacd179d0da726de9b95841658d068e97fefa59b9fa1699c2e6e304c699d8b8d18553e0e28ad1f288836b2f6ad2485722e631", 0xd3, 0x100}], 0x40000, &(0x7f0000000700)=ANY=[@ANYBLOB="6e725f626c6f636b733d7839703333676b25372c7375626a5f757365723d292c646f6e745f617070726185210bb6194519e6663d73797374656d2e706f7369785f61636c5f616363657373002c61756469742c00f68967667954ecb189d6f32f31d2202d8fa3f6e8594c6eef54c26860c6f845c70cc76eb16cee551c31780dacbe7f4c8c3ae9b0eef2020462e9687bdf4adc948fc2d785c823817732c1532a4fa610990bf878e555f08bfd6f37e533fae8cbce72f0db81cdf067a07ef0cf6df79242bd85ece9df52cad4a7ad0749791f97407983103920a63f48825a01c4f0808f82318ef6692a0bfd276211b64827ed756a"])
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000480)=0x3)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r4 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r4, 0x7, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000005c0))
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r4, 0xe, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r5=>r0, {0xc1b1}}, './file1\x00'})
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x5, 0x1f, 0x81, 0x3, 0x0, 0x1, 0x82000, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x401, 0x1, @perf_bp={&(0x7f00000004c0), 0x2}, 0x2820, 0x3d1, 0x7, 0x3, 0x6f5, 0x4, 0x6, 0x0, 0xfffffffe, 0x0, 0x1}, r4, 0x1, r5, 0x8)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:12:11 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(r0, 0x21, &(0x7f0000000200)="ff6a6ba5b204af234f9c68cdfd375d7a983689fb7345740cea8525")
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
r5 = syz_mount_image$nfs(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x80000001, 0x8, &(0x7f00000006c0)=[{&(0x7f00000025c0)="547bea8f5a9849392b81801f0081e2666285a0e55ddbd0153633d00c80f877284708a55eb1711b386860117912b1b763d0ba7d15aea1ceab381686356113c8a8b9bbf15877d352e08680ddc393bc7f35b13158f969bd9e78add950a9c87fd16db62e868ea08f0d8c0f39e4ec1b7696cbfbf5de4d86e99346a1eba130434afaaf5f91bb2b43faa821ae57f63ee9d7e5d9b06c4bfdd4d880ed03aebd2d6ce6a4b35705d84818746f39fb7a7b883e99d83c5ddd04101a72777de6699ab522abf06f66b1ce3465f23360e706cbea82fd33768a211e65190257c8a2c5bd0552ef933a51757af212d5145f48dc581be0920d0f6b7dcd8c528459e9d390a05b9e2b1699d1fe9138ce30c0e64b7ef20ca8b0701a52dc0ec2c4630d240609026ba4fa0d68311a26eb4ea9b0e4a0f121295c534cba34c72be127ad6543f065dcf49dce3a8c54375af3420791db45042be054740a8a41c50510acf346f26102c5106a9df2d1db17497139cac19c4714b6a56bdd6e87cbef91e493f0f1e2de6acb5e8074f0ce010986093d061a2d15790a78f3cbe8f4b97cb81f525882370950ffc753435bdadce37eb9e3749e7d979d5ca05dc059d34ad23ae83dd8a216bcb17a934ff2643970e5f332e70e71734bff9b41c4f9f79d8412f7601ca70c9537cb4e177b152286776aa51a2635e8618e28661ef6a3adad3dbc677f66b5a420d0876384f5bafa9bb3ab0253aca8cc670c4b9f911b716462d8c513a8031a3b543091e021b925a9b0a5b1816b89ae3e62649f35480d32fbb4789167ed4117b3fee1013b160e34695bea41c59b15df9dca6aa3bd960accc283807ae3a1b1d2cf9706a7efef03db8a5f052b5460a8f62c7274e121c5914d0454577cfca74d0adff8cf1821369ee305b690714d4255ae285942efe4dd1038d8c0887f1e35aa0bb152439cae6c8bbc73a1afaad530f2a43809b8e7139384d2780d0b34dde77781ed4c56e74624202e2e1001d061da774a64b150a09e950ae6bd602f4e327a1b7b54135eec30df8bbfa8562e403d3a5ac5c9bbed2d0a38ef61eed3f2c26779f2a623eb104c55d2059b5705b2150480f3d5efa09b4c0fa11dcdf75878b8bb1cc52425b2d1a601c13c0ce0cb14a6f9789b367b225afc7c631eec9c34d2c3179a6ee176e02721a58737a06c4c2af28479c35677fbdb391c1ca91c43d5d8b7cd181f6ec9705a0aff5cc22066938111b2b2d172b91b15f8b4979f73f6dc3b13ee18c4b61a337c764cc6bf9fb6356e7e684b51fdee7feaf0417d8aeb9d3a7dbb5275efbaf119bf1fe382ac4bc42cf8e372613c3ce7f6576e7d02e09646b567b5bb81243996990b7df77d3176a4542555a617b2391d34600d8db1018fb6f9ff92b4f4ca692c421c1bff1e0afab4bf6ab6586f8035a86a8c686524aa73b362d3e65f9093ddfdd20bedf55d7b4a3bcbb7707c4bee9124bb896cedb3935e6ea2d7edfd425896ecab5215df5f948207673d6ceaa32b379771b26ce8c5bb33a965de0b061620a8cbb3eea913f7784172139e77dd3dd0574304088e409b2be54ea9099271ea2e687747833fbd11d7a4b7f680da0b7ac0ebd6d5bcfa9b1acd26823e5894bab5cc0dc6eaacf61a6dbd49249b8ebc7f78c602187ed3b1be5af8bb532ec7d56baa6304fcd08026074fb1f446877b435768548d845bbd7db6ed4e6ece45a6dc8524330cd3ee9e475e80de6af54ce0bb16647750ab0a7b2d4289ca36cafcd121fcf3219131ed4c81432b940746466b4dd40aa3f3c26f3201f81056e3bb3d3e88eb027b3288eb073bd5f0e01e15630ca8175234cbe6b5b91f807930f45847ff9458f3ccdbdd7aa3d0910ee1c16f707339c7758dbd483c4bf0abea4652e336b66fe7061e804af65ee24b7385648ad8a51b4661dbe963b9e1f8e10359671565d605f1d0e3f44353515e61453683ea00bf0e1265c01e08129493e1dbdecefc30af3cf7d19ee69ea77cbdbcd727aef196e5510d56ec482f21e6285938595a7ef75fa557ee5a3de3409f7939f6fb64077e214b4f2e00daffd8099d42b06cf5c91e3f495c76d71efddf66bcd9780eb4015057598e5796ed27e8e653defef4d5473160cfd4da1a92842881c8f40228806c397a396d4df010111cde8efece163242c402bec2c4c4940c828f1583a45b1b10b321b0e9273e6229e05a843db58727d37c18c82a3b8bcb65f232b19cb2efd4497d9ca6ab0b2cea103d873082939d97bb6f02272e92debaff64584b0fb6e4fb114dec0edf683cc6ead65ec306f6e738c65ebf05abd93ed8bc6fa6d6565c4d9432ccd65250df6107afccbf3e12f4a3a525c2eebd506bfcacc95b2873f2765ee535399d99df2208365750146483770bd114cfa2ec672dfeb8fb1dcbfa20d279cc6d1c6e3ce227459d42eccfdf1465db490e111092367e9778228217c7ae195423ec4af94ac31c62aef3bad901d6a79e90f35ae5110e5b645dd7d3de01c09c481970d5eddf479add331058d94022ecbd7caf330fe6e3d052ede09242e6deb0c35cbabd085926175149f0c9ff4503d1132a60b790a6d41d331251c827b8051c207c73b4382f2ca28c37d6e020753a67e9bad01a9f9899cd9c5ed85cbfcb5b169ae3de26bcd732d185a1293165515b659aa0384fd6d8115b9ac4b1f21133b4e714fd9bd306d657e0a5258e768e274f8651a6db32612f461dbb3e82529d514cf3b5131598fbb532de2844e9144cd45e39c8411ceca984a0fda3522cb53360d808db96a9baebe94d43176171dc16acfd79398e314422600dc51b89f1934b30244be8c64acd1f22f8f69ca08bb616f9a38de850539b86f11b62030156707895d9fe569027d8abf267fba3947ebefc37391af6c610cf7b45cda2d8c074b0d113371d51c5fad07f5e15e4ab51c5ea2f85964aa68c7bf90664d0fe354f295686d8bd1286147ab7101efe6b0b5afa371b06b7f9f168add4830c094734105f57a9147862e855f34b540ce68addae7ab7ebbe9a7149dda7e0e47f9cf6669224b947e8f5b680aa535a00c0ff50bec4a50c764fe93b0ee879b49b3111e2ab0a17c1272ad93f5b9a2478d80d3a7308cb7c0a821fe4ea8a708218c02a48119828a8415f5b8a4234d98e09fa89ecdcc48d298b793a57c040a2f469bf97c38c1cd3d017b26d094b0e6c5b0796723f6fcdcb56b1d25d24c8f10d88388a708ef5a365fbb32a086f02731e8af035661424995b526bd5fb0de4cf6a5fc9c4132066b39eb249b91c09b3e764e27e0c5d6c133f1aac4390e67813675fd70a63b6ddac5ccdd4dcb2de9feb6d92d77544ca8133ac290902585c805ca2796e5fc81f7a63c8e22ed939dca3ff12623e9bb3cba6e77b45693998cc0036df9789033138dc3877be40bd9dc96e5dcd039ab03a0b96ed40575c23fe4bba09e0e162e401d5dd33620f8cccc47b6c09b7829cb1e3c8d39d1a81eb38366192c2fa2cb4c31172dad6d1e1283bd6dd367fce68963feff2fbceb3c25a0e92bbc124e36d2964e10ce487a1767f3bbf2d216bbddc76fb3f177768b1aa495f3e02f45af2ea9ebc36dd90fbad501df3021f50dadc06a683eebd4eb7398d7a4787884137438f0a3375d663b776c51185cbad04e97a79244bb3125738c7247bc8f6b796434218a804df1923889c30adf774b53260d9b12df62d5cac794ce784ead5566b873cc12e5d67602d843403998198315bd6ecca521a52301b1df747a12a1172f69ac52231b9e0816d7fa7eff53a4ccfea51fbd9670861461c878a3da86f43341315ea49fca1140b09cc3d69aee3fcbc5d401d5b987303ff40e98e5d47a7d27b745e71655620bded1007ae79d9944caec47b18ee7708d0f7fcb7844c9813f9714e7f5c76497bbe8ce96261d77ba2f7887242cf37c72924e15ca24b4682f68ba86930533791122c51f92373c96b718a18424ff4166276c9715099c72a5b9f12e609db4b5e1e66ae36cfe6e0e2cfdaa212cb7611d29805bc61b22845a0518ac0226e448b6fe2e4e3769f730b983c2d36ff02a4af9d203f771e88f053f2e17f54987d236e61e9b767bc5150df479baff34558dea5c7b163c37b84c7e0866e6e7da5162a414c94172e7396cebca9915a471a26defea7a13d164d95ad9954338520c5e251b1d2e4cabe3ff279555f195b4de22080a8c1be416c953eb6f5476c06407c1800ba8cbb61937d6209ccbd368084767a87c0af000aec64d48b4c17b371604de4a412a1f1a941ac307475c50a36dd68ce1c82f7268486547a29b9befb7aeeb1915323321bc8ff0214bfb2d7134671f8b221b3f0e874dbffee14a55e01a2d21cda3c7ca9da73e8a347227af066317d4865d844e29e0e59a90482a93bf062956337aee33a367911a1e8549ec5db10b8e28e2b21026a21fb5bde511e55f77a302a5af58f4d5a571c081a364171e6e39fa5735a2915e5d775b5738ade5a8f2337357c9b6eb0fb263a2733fa8df10c391c818f90a36598472a85ab5ef337728812de5e68f6a7ac805739d532de464ca73a5226bc02dec911276bb83e61da4aefb1b9695c42d61f25a19a1a72b98ec904389b5305ca0da70e91ae9b59516de847f37a103faaf268e18c5ae37c7b4252ff414a9fe07d7aaa53ef5d34bab11e344d6af07db9667f983a8f9020b79367a1f7364cf2afaebba51ec83feba31cf97fe6c2e65623860a11a662eb079d8e7ff34e519797f32af4b2aa6be55bcc6f12035fa3ccc7c14e8d5d5c9a420b665a24dde8ea08a507e5aa645b5b6d44349a20bb67b92112e262b2149772f57e511b8ac68192727a4f0bf1c423c86ca1e1619c10f8caa880beb9487c930e449c546dad34313503ab8d6d06b5b788ec50799bde7bcc5c8ac61b00854a7bbdc9f8b6f72f65a88815830d0617e6249fe02a2925bfc6a140b875941eec9630ce78bc9886fc893d3409970f24f33ae2a12561faf827fd46aa4ec594525f24d581287c5803e2c8306219580ee74c307e2e22077dd0aec772c5249b50b362456992e1d78a1acb7a822f8a71257a24c105cfcd4616feff6ee1744f4cad3c6a1c389b2a49b861537a035c3d6e16d38614fd0b367654b441f1539b363baa941c9df3579b59d1917948e1c871e94ab87411e3b1146cc524559ecb9a7c5bc8390173645e6f2cf60cad672d5f6b42c5d34b27ef97610a24b01d2c999e6daff6f8e665adc7108f1bd1c7ce8e402f80c4a05756d53d13c7458f5e0fca956db18fc8a480c6597141ee3e77ee34aeebb6e71d6aa746d69b1a170cefa996d2e20a125b606f032cba166b9a0ba36546b3139fa903c40ce641039af21520c173b1a506bf1f1a740ad520eeeb046119c839df69faeaa64e5a2c866f8f756ada0ec0824fb694cd87b80454e5c41d5602c5ebe09e2f7d746cd44b20386564bb2b3b99e7b3fc9a4a62a0e93f00a5c804a77cc75517bae378aee637849a25499a6d7e6c7d18093b68a158efb3f2960741329e3b17b9253e6f8c518c560bf0c6c6b3d2462b4fca51afa074d2ccff2dc54dd5178c2c0984df1f3ba34a1349f08b942a14b58ec8d0e4f289da9efe98a3a46b7e313660daeaaa90d09223ddfe2ed527715a08f1cf52feb4f1184979216a6d46fad23b7497392d00db349da5db0ffadea755c1cd199a3201193c55ed35a1d3713c094d3116031f84386fce9b7708ab036e0ec772cce72697d35082967047274756c41f3f130c74d7a3615a4ebbcc67d1bea48e55dfee4465631853e37e9ef51ef2ef91ce88679cb96c67e22d7aa58abe96bb3b80fe8bc5ad42e591e3a635eea1f035d3a80ba7367cec", 0x1000, 0xb0}, {&(0x7f00000035c0)="415ca776dfb8f9d7638f887dee79fd87d77b656539ba96c35f6c83a15e7906563a8bca1b6aa7016e281770d76a49f63e436ca6748b567f6dbae8cbfe9ca6c125643a6874a117bb65ed02749c6a8ff06783cc614fe5e2fec051f3b3d994f707b46ce0f5f6879ee86cecf46f7777b6efe34452aa4463e16506840e9d770939e0762d04ae98ad915e4b6194b18977283d139787a064c121997b46799e53ce6d0fa9b8432afc69cd4b49ffe96d3fd73a449d8f8c13233efbd5e618c825ce57f1dcc376ae08b88d3b3014a2498c32bb9b7fa95a76724a968b3cfe336aef6d488cf1d5f9a429e9d79fe6277e4ec88549f0044acedb290250d19384e82cd6bc55af15a1dbd9682ac2aa87c1a8f0cf3c89bcd7e9d4ab56921c2e12255dd31ffee8c888bd092731f932c0739a184530a0f7613ff137d9bb478fd77c4d8e607cd49296848f25f76840beedf669adba8e93034322897a7cf54bec50fef2ea8728be37d80e5ce59cd59db7863aed73438aba1ac79642cc2605336614ef74c3f8e5363e2a88360e931cfbf3045638d2843b62c4de516da237888db8e835a85faa843d1ea23cf3a1605785574bfc3779de1d42be4c9e450a932ed48d395f6e27fd18436648944c8f5ede11d730141e5f3a33931551c417380de836b8696fcdba7e58861063f140767311a44cb0c791ec690bc3de84953e0710a7496d100fb4c3f6577389b7ffccbc9ac34f992322161a5873fd03ab7334e1eee6dd01650ce10f63bd360d4861663eb49a9bf87f466608dc71151cdbb81a8c918fcdb39f2855c792eabb5f8d1c7b71356480f5d1bc0e3135956a7682cb5838319e9fbdaa75f84de5e231a2b23864e521f3d403e527628172051637345fe6d74a010e584e4a9a5af7e5e834211ed1ce964170db6882178b34cf4f7f3468cca2b507a752737210219d83d7098604b6a70aab2aa5744e22aad447eecd0e0ac0bf03b03c67560c4e2b2db7b23ac5010b26ff89b67275a64c6396748ffa562cd99e39a342f33d36992cfdb13cccf5c8f21ce6a696c717b5d1616b08d0af4e7689c717d8d3c6e52b0d0b8bbcda30ee2e4e82310c1016b95a0e9e30352eadcd558f58cfbe014b6f093bdf4027cbefdf6fe9e3e9a77418327aae2a9b9679d28df1bbdcb0fe3026347e79d0f849baa10db0b2beb57a666d99c6a6a48f1734ac64d8eb569b38b4528955a43a07f1eb1a8c24a631a15c6149446c1ee91c226cee799b0d0f3bb41002160a8535a070eddfc0f2680d094433cfcbe863df8b98dc4a741256aa89ded14858b51178070861e503c48ec30af5c69549dc1fcbaf31861b2c0f7e329c55987aa36639aad2927ec7db6bef5c95a168c3a2447f92b5e7d279d007cd312c33f0ca61e9694448ccb3b9838c3a6cbb3496464975081d6860761b1d636a2aa5735f7efdbf147be6a82672eb4118e91e9c301ec21ca5eb28cd7a27ce3438e1b005994a7528810bb6749c764219e4ed36e195325f8d697512d33d1cb4f7a7f7cc1f5fdd8800342c8322a7dcc3cd682fed544ae0edc66be2dcbb273e374cb7c265fee8777c4d899dfb03a1ecab30948619ebd2d775a070fdae05f4978dc10695187e5dc755257b82a6532fb54fe0d9c2aad6ac90487c1361a6b68dc897da7efa9dd6f7d2f721b0f5c946f76a67ef848b0e0ad4a30466e6460d727fe4b15cfdbf62a9b2700b422904aee0d3385490f5a02571597da105e8abb0e9cab326c2433a5da4fab60d3c9e77779e1cf398a1d664739d0e584d79759d14984be8224f2ff074638709b95996a6a14069fc1fd40b75d5cf18d3cd206ae8c3d576347cab011c9a5b04862a1148d2a3da084028d95a386b67780ef1c28b1880456ef2a21bb81e9179d4d368f9ba67274fa033e4a6138e9e62e777925962a03453d1f5534c957f08c01b2f0bfad1f69eb6eb156c85cee9ce7614a1d18bebbad329b06e413a8864441b3741e1b07fb02579f4d40677a4ef3c8c978f41044f17182025bda60bbc8ac1dafce00fc24c0baa61579b7949983475044490999ec6400dfef35b4252461fc4c35c5df9a9a0ee37f98c0b09578e9e1bc4f3f6dc292b46271bce4dd462a0315435736f88263a891c9dc88aa68fd04c7e9174c69e701b2a1053e89006ee4c5f4344e5660e5ef17da6767d4fadb0133ae53af9d0e6d82546d8275c950c9e06a8cb6d49bc3906cb3d7b429c529f6b0897be021ea6caaaa3fdba7654d948f60b876b5b32daf85a07d4e434fff17fdd88735327c01d48711622c79d6bbe964fd0b802fde1e536a7d548495bc5bd376c36b41c38dfde4cb1e6f9c419ddba4aa5677fee68c18ac95297a22e6f9ff3872628bf45da4d96ce4b2692846296a9cbae6f710f9c6a1f8f7630d239c0fce88a0f3aaadf0bbbeaa67aa529c6d29f8ee7310bfe325e7bc0de233bc143aeea9f8cd6d8600b969bd2fd69a74ef32c901acc0feda61d798b491c58abd29a56d01e2dad244a0800c5bceb9b87e13faa665f6425896d2276646be74e66e57107bd4f7f8a7a5b6917e7eaccf5a4ffef265a2eacaa7076e398ab041210ddd426ab60b026013e2c1924ebeac222b17b2645f5c214e3a5653cb8b82be269221b9bd669ec7b1e5b7e2479b47f536ef81b6c301c2141aecdfcd6da317977df18b763319a8a92a1c5a6881ad0ae05a190991dbf8f41693988d00f20bf0aef95838ad3cc5a0694a4ddd3e76777b24d556a18e79c62420f3f44b93819adb68f88b24de125957b4fdf3c0dd4f714fc79f11665260bb55035208f426bfa3bc7e5787144dfb2e80c14b61ada7447ff4c4ccadd0eeaf41d2bd9143b1d7b42d77c837d1accc7e800969271ff2a32b409cd4d6b6fc4f2bf147729ea38e52504e1d47e38a731429645e0a8fd59ff716707fd0aad8e73e36463ffa2c6aa3e1ec674e0936de3dcf87c3163863a498c3ad78e882e3d5604eff5f93412c73392628c937311fdabce19eed09b51e42f24f6b07e579cfe93326e846670dac77d9ec20ae0c3de45eb9f91ea80c9d255e8b336cfaa18519c25f0dfbfc7a62999499114d1d70ab4d0de0bdbb9112fad71d046d32dc789b593923e0027a5a2fd9f2c492e1942700d54294f4ce78ee12097b398e1f837f627a6ab79ea4ce32cca20983e0bb5dd4aa44f3a5fc0ebc9edbc6bd4ab7b4bd88878cc71365dbd6d32b27c36094236d2c89fe36c0c7e8ae7a45202d481f7c9d9a6c7a90f9e2f5e91cc4501e30ec79dd499437e3ea984efa89e86639517f1e0ef874f23616e04e2252d11b4fb8c5dec27e620466fd222cd03efd67a26b5d5ba98724a3abbd6088996fe7374e06605c621abe0d90ff05bbf1427e236123b9328497f0f98deeb787f4d35c0db52529a5a1c66a602e3043a2cd3e6fa5522e6b5aaf4adb88344dbc5ec182d7442cbcc4be1d4bd282f714c9c3f6feda867c562b500bc992d664c0451d07c261352d70dff8b58aaf2d7ae2e146a1420c0581e50c2e39996de067095806908cf90ee938a721372aed53f5e0fab84d775cd90c72059dc63e2eb35e8571f502c3327453be3cc3a55c71dfc564503b7c401d78f4f1d71b9e8201d09fb54a9e0cdf7e497bc0d9ba57f682e7af6f1c3c5d9e0ac810fb706db9a4e8b5ae464b43a3fdebf15a600112da7d4ffc1674120ecee3ae32c8f70d45d3974b0fe5559c63ff8dd041298a2f7ac361bef640783be091f2970729e131a0e936f174f9d01b06f373d121a1c374074fdc7b7b7ca2182be60f6321adbc3b9a15826133576c6689e2c76ada49341ad2a8b871a9b5f3d57f6509f67becf06a4da6902fb7e346042957382b5dbfa27ef4974cd96d83465f2216cce0a4277cebd7de3f5a8860a1db37bdaefe83ef6e15aa3a677dbcaa5027f0133db2479a1ca591d2bc44bfb2f3dce722b000e1721dbf231e717b3ca40c4113180d9a5f78b0e1093c40b5ab03a576da95ac1a103d87e36b329f6744759483b37c2ed8e982f9e06d29ca70fdaf3e13ea7f2a30145c01b6ce3263e9dc5baa5507e27fc4993c0224ceab520a071f7c5fe8e1ea0b71a35d1a6a726d8581d0ad3e4aee44be0d994906bd052fec5ff0337e14fd6642b538166b0efa8d6ee55f922f0590ebda0a7310d182ffc4ceb1825ce03a7ec71ab2da639b0e187796d830799936c8e03f0d35968fb459cd6c2d67168c6eef5c3144824d4ccc5854adc0b6f8f2056bd56b9c7178d4f38c9836675c3ade440562daa5c941129d9e389f78b8a454a8662d5440a25ab8b4e505efa20a56aee982ea71ef045edac2eda53f3bc47cc7d3e60d368d47ad7dbaeca147d00ce92958d57932c7c048b9a693db7e309df4fc181ca1b19c0549b62cf4908fce5dcd9b1440653db2222a1b2788171e66de99f66161dbf34c86519f7cfc61173861dd9f67cb14e4185768d5ca1b1d31cf7b6fb7dc390f5300637a68b8fc744e15471b3b4b2a5c9e39ce62f35eb398178bbf1c7fdba3082e63b0a87414b3d3330d2baae5c3037cdd247a8433abf04fc0e535946bbf2e2cf9e3a9d7a96e9553877c2dcced98c4992168975511532618c3aca593072e6176535b25c3fe35f359c9a7a0d20ff5793d070d5fe57014d00803b3197466c4536884885204db38100f7bf6e51f3e376fc0f7ad84bd2d517d66afa5a5dfd613e389566edf6eac81630d5d2271d8962f1c115af62fc6a204f7c61edb265c1b3015c62d6a34bc2087e5ee53ded2692ca9c70b2590fa1ae3f084625d2a1e75cdbe41f2bcc7ded7cbfdd3ccd6c16abb81191172cd755a4584adfe77adbb44a2e0a77565646cd94862021ad0c84564e23a4d78431f909846d5ab5853c8b3b9cadeb769f3462123bec02d292485c6c9d306eef5e32c7a656776b6789daf8eb780b2c842c81619369f42df0e0a46d061858d4da9399ead30c4421bcc1ad558295c17dbdd82a6baa19e1216830268c3e023b80484b43b8b7190d2e8c3623f2939cfe7a0e143477a2e31686fd99eb9860009bee58b6e2b6eebfd02e3bfb6e7ac608e560717aede2d441461872ed99416cc224eb56024cde8ac2c2b04e600ce042b73ee01f477adcc6ef4ca3ead3e3d7b1604a010a2f06be6ab5749cec075670c83370192c72b5bd7fbb2dfd8f674145780cd5f5098c3e1b126b99aa9931308ab4e228f772657f00522c800715f3657aaa46dfbc620a83d34b582eef5ed8901663a610a56ef39df24da5e63da4bd822168144ef2f1c97b5784b4ed65834379b6450b04478caf92fb2dbf4e463179fd6116c46e88ded36d06d720c696dfc4fc9b2401961b64d0c4a0217a97d3e800a301c73549732387bbc652d94fcc5beaa9e27e06fff6b1ca317ec33e5a586cbf67f6ad41f92eb2dbe77c20e51dd68bf9a83ff2a6bb8ed028541c536955b9837372305795e171aa049077582556787afe28649a9c350a03bc38ff3acaa522e5ebfa87ee63b79573efb74fdb1ef199a36a0e146ff7cd8f3893778cdfb768f69de3c7c4c2bc16e7163cec8d08529144d4fa619ba3756d142d9ff22b11fc33afdb6f0457a73e4519b88715e2fcbc4dd08377e018e06bfae118c4e0261f0e60ad4e44167e3cf570ac16214dad93fce4ef84c9902408c4ef33111d96f9440073caa151b09062fe1d955fb887e89f850a2d2eac55b1ac44cfe5de351a3b9a5e41e743eb4853ea48a66ea096c9ce258fd44d59258cde9e7521c01357e9cd023edb215ea4461680ae75ef54e392d7d43aaac2e147b8526eb86d7d5b333d7be514120eb62f67ae584a7b96216a122829978b127b31c9f4c619129f49d4703a9039", 0x1000, 0xca4a}, {&(0x7f0000000340)="4675ef1847f9315809de8d23ecddc5aaa8675932f2a4ef328f036f140ae526461a49664bafe5a4f10b5e8dcca71c8861041ec0ce4f6a03326e3bce5dc861c4177a7d7dedd4ac820fe850470fe51e64603264dcd248", 0x55, 0x2}, {&(0x7f00000003c0)="2a6c04111e834bdc93aa4db5a4b5deb1ad0f9d1ecbdecc68c0fa7457c50f0830deb9f9c04f38a865ddab0dfcd1db65738bf58ffbdeb8d914208c20219427fff88b0031f062096693c94e9fc0d402acf9faed14613d8817730bcc780bdb46f4f3ec67138a8faf6e82efa35f65d85b8c2284f6019ee7debf9723", 0x79, 0x8}, {&(0x7f0000000440)="dc404b50c93a149cacabf1d3b3cb8bb0ee66e066e60a33", 0x17, 0x1}, {&(0x7f0000000480)="912a108d3526049bc213e005a2a95383096d66ccce4887c5382e739f65f1bfff8bce1c1a90a19224873f50c92fe8dbcef516d0", 0x33, 0x7}, {&(0x7f00000004c0)="a1696918643bb622ae19c68cf17b77e524c8e4025bd2d66a93d264805079b74793f6916d0a6f3eaac67b915418823ffac3e103a2b37bbe8946baa59889ab6202448a47317c69779ac89525d90a58e61efa05cf6fb960b37e9ef3e798b27b4aa4988d867d002982a3b8a4ae1711c1b59562f0109701ac076bf36d19f5d1892874f4769ce3d6523fa26aa70335aeeb1c1358fb51429b004fb8e31f79302089f36ff5ba45b01668bd8a3f1a55b926cf7e45a251b08891915413e6c21f816b04d473dd94efdd1b06b5d3565c067730b42f", 0xcf, 0x4}, {&(0x7f00000005c0)="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", 0xfd, 0x1000}], 0x804800, &(0x7f0000000780)={[{'.[}'}, {'&/$^@^\x85/:C)'}, {'(.:\x04+j6-{\x97'}, {'\x00'}, {}, {'\x00'}]})
ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file1\x00'})
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x9c04, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f00000015c0)={0x0, 0x9})

12:12:11 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="0410000200000000002000"/24], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x9, 0x1, 0x88, 0x81, 0x0, 0x2, 0xc12, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x401e1, 0x0, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000280))
r3 = pidfd_getfd(r1, r2, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(0xffffffffffffffff, 0x5260000000000000, 0x3)
lseek(r4, 0x0, 0x3)
ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000200)={0x1, 0xfffffffe, 0xff, 0x2, 0x1000})
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2558.035464] loop7: detected capacity change from 0 to 264192
[ 2558.058993] nfs: Unknown parameter '.[}'
[ 2558.169106] syz-executor.2: attempt to access beyond end of device
[ 2558.169106] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2558.171759] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2558.186033] syz-executor.5: attempt to access beyond end of device
[ 2558.186033] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2558.187992] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:12:11 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r0, {0xf6a}}, './file0\x00'})
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000002c0)={0x5, 0x30, '\x00', 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:12:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:12:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x40, 0x1f, 0x75, 0xb0, 0x0, 0x5, 0x4, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xf0, 0x4, @perf_config_ext={0x6, 0xfb4d}, 0x8, 0x80000001, 0x3, 0x0, 0x4, 0x7ba, 0x8001, 0x0, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0x2, r0, 0x1)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:12:11 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="d92f543fdba0aa07981a5e8fd3e8859d160acbfa260f47260a89a65707000000005e45050a57b3effc00000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x2c, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x3, 0x88, 0x7f, 0x0, 0x10001, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0x800, 0x6, 0x0, 0x713, 0x0, 0x100}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000300))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f00000002c0)=0x2, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x180, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r4, 0x0, 0x3)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={<r5=>r4, 0x8e, 0x2, 0x582})
r6 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r6, 0x0, 0x3)
ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000280)={0xfff, 0x5})
ioctl$LOOP_SET_FD(r5, 0x4c00, r6)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2558.410972] loop2: detected capacity change from 0 to 40
12:12:11 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x2784, &(0x7f0000000080)={0x0, 0x42fd, 0x1, 0x1, 0x13e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000140))
r2 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580)=<r3=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
dup(r0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1}, 0x6)
fallocate(r5, 0x0, 0x0, 0x87ffffc)
ftruncate(r5, 0xfffffffffffffff7)
close(r4)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:12:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[ 2558.495994] loop5: detected capacity change from 0 to 40
[ 2558.505031] syz-executor.2: attempt to access beyond end of device
[ 2558.505031] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2558.507245] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2558.580235] syz-executor.5: attempt to access beyond end of device
[ 2558.580235] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2558.581216] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2558.592274] syz-executor.5: attempt to access beyond end of device
[ 2558.592274] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2558.593236] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:12:12 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200"/24], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2558.695057] tmpfs: Unknown parameter 'HàëW›Ê³%hï–§
[ 2558.695057] Ó‚}‰ÐIÀ×Ð×ì	�W¹'
[ 2558.728932] tmpfs: Unknown parameter 'HàëW›Ê³%hï–§
[ 2558.728932] Ó‚}‰ÐIÀ×Ð×ì	�W¹'
12:12:12 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:12:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[ 2558.776949] loop6: detected capacity change from 0 to 40
[ 2558.779512] FAT-fs (loop6): invalid media value (0x00)
[ 2558.779893] FAT-fs (loop6): Can't find a valid FAT filesystem
12:12:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2558.816945] loop5: detected capacity change from 0 to 40
[ 2558.866103] tmpfs: Unknown parameter 'HàëW›Ê³%hï–§
[ 2558.866103] Ó‚}‰ÐIÀ×Ð×ì	�W¹'
[ 2558.867041] tmpfs: Unknown parameter 'HàëW›Ê³%hï–§
[ 2558.867041] Ó‚}‰ÐIÀ×Ð×ì	�W¹'
12:12:12 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat(r2, &(0x7f0000000200)='./file1\x00', 0x840, 0x16c)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:12:12 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200))
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000280)=0x4)

[ 2558.978264] loop2: detected capacity change from 0 to 40
12:12:12 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a657070000000000000097567e7f0e195cc7c121178837811ea1b8ae0000d041db68267745fce931eaffb73c1de4b73199bbefed4ba63bd917d2ab46147d9bba38800f51c22d686fc4e7b1ab1904d13ffad5dc0e2dd4c5fbbdb7bac6c29a7d1640a8c3b9829e619073d92ce4546567d15ad8503a7b6cae3a9db5a228df5a5fd1151df4328e65597098f46da82632f3aea74848161fe1bd2cb0764c61163a", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0)

[ 2559.064525] syz-executor.2: attempt to access beyond end of device
[ 2559.064525] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2559.065525] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2559.076915] syz-executor.5: attempt to access beyond end of device
[ 2559.076915] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2559.078319] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2559.082447] syz-executor.2: attempt to access beyond end of device
[ 2559.082447] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2559.083266] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:12:29 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000015c0)={{0x10b, 0x1, 0x0, 0x3c0, 0x266, 0x4, 0x395, 0x5}, "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", ['\x00', '\x00', '\x00']}, 0x1320)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:12:29 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0xfffffffffffffffc}, 0x11912, 0x0, 0x0, 0x7, 0x893c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:12:29 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:12:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:12:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2576.603260] loop6: detected capacity change from 0 to 40
12:12:30 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000008000000000000000000002000000000000000771bbda3330f2520b3e2ec6d636317a78675bee4baf4e56fff07959b911ac574445a8b64628a2454e507decd708111ae6283180eb9a49444faa4c0526b647c299b9788d63d0bd5d6263497114be084db79892b12d0d0f019906be65d0009aeb47e20009702277bc1e78f0c27193ace3ef0a084a2d048585763e692314d2f"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:12:30 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', <r1=>0x0})
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @broadcast}}}], 0x20}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000680)={'ip_vti0\x00', <r2=>0x0, 0x7800, 0x8, 0x4, 0x8, {{0x15, 0x4, 0x3, 0x4, 0x54, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, {[@rr={0x7, 0x17, 0xef, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xc, "dfa3c1882c9cc650c372"}, @timestamp_prespec={0x44, 0x1c, 0x40, 0x3, 0x7, [{@broadcast, 0x80000001}, {@multicast1, 0x1f}, {@dev={0xac, 0x14, 0x14, 0x37}}]}]}}}}})
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)={0x158, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r3 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r6 = open(&(0x7f0000000000)='./file1\x00', 0x90c00, 0xa)
syz_io_uring_setup(0x3514, &(0x7f0000000080)={0x0, 0x5c1, 0x0, 0x2, 0x39f, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
fallocate(r5, 0x0, 0x0, 0x87ffffc)
ftruncate(r5, 0xfffffffffffffff7)
close(r4)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:12:30 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000200))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2576.633103] loop2: detected capacity change from 0 to 40
[ 2576.633910] FAT-fs (loop6): invalid media value (0x00)
[ 2576.634754] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2576.687886] loop5: detected capacity change from 0 to 40
[ 2576.847888] syz-executor.2: attempt to access beyond end of device
[ 2576.847888] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2576.849680] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2576.905874] syz-executor.5: attempt to access beyond end of device
[ 2576.905874] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2576.907838] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:12:45 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:12:45 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x3, 0x4, 0x3f, 0x81, 0x0, 0x8, 0xf08, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x1, 0x1ff}, 0x11, 0x100, 0x10001, 0x2, 0xed6, 0x8ad3, 0xd66c, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf, r3, 0x1)

12:12:45 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:12:45 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
sendfile(r0, r0, &(0x7f0000000040)=0x8, 0xffffffffffffffff)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:12:45 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000480)=0x4, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000007f02000010fb091a00000000200000f8c76eb1131c0000000000"], 0x2c, 0x0)
syz_io_uring_setup(0x4df2, &(0x7f0000000240)={0x0, 0xd8e8, 0x4, 0x2, 0xc8, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000380)=<r3=>0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000440)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000003c0)=@caif=@dbg={0x25, 0x0, 0xcd}, 0x0, 0x0, 0x0, {0x0, r5}}, 0x7186)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x4c202, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:12:45 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a657070000000087ed737b7e00000000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:12:45 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:12:45 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ftruncate(r2, 0xfffffffffffffff7)
close(r1)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', <r3=>0x0, 0x29, 0x73, 0x7f, 0x100, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x1, 0x40, 0x5f}})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', <r6=>0x0})
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000009c0)={0x3d4, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x5, 0x80, 0xff, 0x7fffffff}, {0x3, 0x6, 0x1, 0x4}, {0x8, 0x3, 0x3b, 0x8}, {0x4, 0x3, 0x8, 0x10000}, {0xffc1, 0x1, 0x3f, 0xfffffffa}, {0x80, 0x9, 0x6, 0x5}, {0x7, 0x3, 0xc7, 0x9}, {0x400, 0x8, 0x1, 0x8}, {0x2, 0x8, 0xff, 0xffffa468}]}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x60}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)

[ 2592.275857] loop6: detected capacity change from 0 to 40
[ 2592.283625] loop5: detected capacity change from 0 to 40
[ 2592.287932] FAT-fs (loop6): invalid media value (0x00)
[ 2592.288701] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2592.317665] loop2: detected capacity change from 0 to 40
[ 2592.439321] syz-executor.5: attempt to access beyond end of device
[ 2592.439321] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2592.441251] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:12:45 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="5b0000000000002010000200000000002000000000002000"], 0x2c, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x2)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0)
read(r2, &(0x7f0000000380)=""/73, 0x49)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x40, 0xff, 0x6a, 0x5, 0x0, 0x5, 0x10200, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0xb9, 0x10000}, 0x20488, 0x5, 0xffff, 0x1, 0x3, 0x1f1, 0x4102, 0x0, 0x3f, 0x0, 0x12}, 0x0, 0x10, r1, 0x1)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x480002, 0x0)
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x1f, 0x9, 0x5, 0x6, 0x0, 0x2, 0x10005, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x2000, 0x9, 0x40, 0x1, 0x2, 0xffffffd8, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x1, r0, 0xa)

[ 2592.574969] syz-executor.2: attempt to access beyond end of device
[ 2592.574969] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2592.576789] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:12:46 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x2, 0x6f, 0x1, 0x40, 0x0, 0x3, 0x40000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x5, 0x5}, 0xc100, 0x1, 0x2, 0x7, 0x864a, 0x5, 0x3, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r2, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r2, 0xe, 0xffffffffffffffff, 0x3)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000001500)=""/116, 0x74}, {&(0x7f00000015c0)=""/18, 0x12}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/96, 0x60}, {&(0x7f0000001700)=""/216, 0xd8}, {&(0x7f0000001800)=""/143, 0x8f}, {&(0x7f00000018c0)=""/68, 0x44}], 0x9, &(0x7f0000001a00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001b00), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001b80)=""/236, 0xec}, {&(0x7f0000001c80)=""/14, 0xe}, {&(0x7f0000001cc0)=""/54, 0x36}, {&(0x7f0000001d00)=""/141, 0x8d}], 0x4, &(0x7f0000001e00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000001f40), 0x6e, &(0x7f0000002400)=[{&(0x7f0000001fc0)=""/200, 0xc8}, {&(0x7f00000020c0)=""/140, 0x8c}, {&(0x7f0000002180)=""/120, 0x78}, {&(0x7f0000002200)=""/102, 0x66}, {&(0x7f0000002280)=""/113, 0x71}, {&(0x7f0000002300)=""/93, 0x5d}, {&(0x7f0000002380)=""/122, 0x7a}], 0x7, &(0x7f0000002480)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x3, 0x1, 0x0)
sched_rr_get_interval(r2, &(0x7f0000000300))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=<r5=>0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x2}, [{0x2, 0x0, r3}, {0x2, 0x1, r4}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x5, r5}, {0x2, 0x1}], {0x4, 0x7}, [{0x8, 0x3, 0xee01}], {0x10, 0x3}, {0x20, 0x3}}, 0x5c, 0x3)

12:12:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:12:46 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYBLOB="3ff3c36d1ee5752268380ab1da3f69bfe0d8846c7ac35b23c9c3b305eb0cfa5d62e701c68e182b3c1aadac944420fc79e90fcb", @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x3)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:12:46 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000200), 0x81, 0x200)
write$binfmt_aout(r1, &(0x7f0000000280)={{0x107, 0x80, 0x22, 0x14d, 0x4e, 0x3, 0x385, 0x61}, "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", ['\x00', '\x00']}, 0x31b)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
r3 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r3, 0x0, 0x3)
ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000005c0)={0x1, 0x5, @status={[0x6, 0x3, 0x3, 0x9, 0x6, 0x1]}, [0x9, 0x7, 0x1, 0x800, 0x8, 0x3, 0x3, 0x3, 0x81, 0x0, 0x7, 0x5, 0x3ff, 0x2, 0xb3, 0x16, 0x6, 0x3b, 0x1f, 0x6, 0x1, 0x4, 0x3ff, 0x1, 0x56a, 0x40, 0xb1, 0x0, 0xe4a2, 0x8, 0x10000, 0x5a8, 0xfffffffeffffffff, 0x1f0, 0x5, 0x0, 0xfff, 0x7f, 0xffffffff00000000, 0x6000, 0x645da818, 0x1ff, 0x100000001, 0x40, 0x7ff, 0x9, 0x2, 0x9, 0x6, 0x10000, 0x6, 0xfffffffffffffffd, 0x400, 0x80000001, 0xba, 0x3, 0x1f, 0x7, 0x800, 0x1f, 0x0, 0x1, 0x4, 0xfffffffffffffff8]})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000001000)=0x1)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2592.684628] loop5: detected capacity change from 0 to 40
12:12:46 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x3ff, 0x2}, 0xe)
r2 = dup2(r1, r0)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x8, 0x4000)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r4, 0x0, 0x3)
sendfile(r3, r4, &(0x7f0000000200), 0x2)
bind(r2, &(0x7f0000000100)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:12:46 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2592.820619] syz-executor.5: attempt to access beyond end of device
[ 2592.820619] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2592.821976] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:12:46 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0xbe, 0x80, 0x4, 0x8, 0x0, 0x0, 0xa8600, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x200, 0x3d00}, 0x180, 0x5, 0x8, 0x9, 0x4, 0x9, 0x4eb, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setsig(r0, 0xa, 0x1)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x8009, &(0x7f0000000200)=0x23, &(0x7f0000000180)=0x7)

[ 2593.002127] loop2: detected capacity change from 0 to 40
[ 2593.167785] syz-executor.2: attempt to access beyond end of device
[ 2593.167785] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2593.168888] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2607.122662] loop6: detected capacity change from 0 to 40
12:13:00 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)

12:13:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:13:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:13:00 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
r3 = timerfd_create(0x5, 0x800)
sendfile(r2, r3, &(0x7f0000000740)=0x7, 0xfff)

12:13:00 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="d9d3e8a59d160a030001fcffffffffffff0000ebffffff0000943b0268a237da271cb2b0dd865f9eaeac4479522b63101327a55669f60ed19ea8d03124e6c564ca8449a1b7e3f6852c2b32b6f328b1f2c913af46584c1432a3101e405478fdbf0fd20421205bf98b113d07b4b3876bc66b5a1e1f1b21ebd073c6", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:00 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0xbb9, 0x0, 0x0, 0xfd, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x1)
r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
fallocate(r2, 0x5, 0x4, 0x3556)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x0, 0x9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010101, @rand_addr=0x64010100, @remote, @empty, @remote, @local, @private=0xa010102]}, 0x34)
signalfd4(r2, &(0x7f0000000280)={[0x5]}, 0x8, 0x800)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:13:00 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r1=>0x0)
sched_setscheduler(r1, 0x6, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000140)={0x0, 0x36, 0x2, @thr={&(0x7f0000000480)="d5147880faea9273bb9cadfcbc07b8b09c9104de599f11f069aa26d88959af9a4b2be4f99a1f2f5c494ada6005faa258e224a22e706cee72e965ea9806a30b37ac03f97548427ea95cc3fc11d777cd2ea206ec2bebaad8b785853de4f2f1d911f882af13c3603dffcf83c19da373c6f292bd0ea208cbdf2ca68c08d9ae112bc58baa86337217b80f16697c082d145e5c542b140f8996b148f9b7fcdf6d8e419ccbd442de6c7deb98d799774ddb2561fe2dcaa47d22aa30e01aec58f7d0e48bdb8a7fdbf3c26ed267b796a4479e660b8698378b1eb5f0015d447ccc00f46283075e989a4fe9317494919b673afc55a7", &(0x7f00000000c0)}}, &(0x7f0000000180))
r2 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0xfdea, 0x0, 0x8000003, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
syz_io_uring_setup(0xd50, &(0x7f0000000200)={0x0, 0xb3f7, 0x1, 0x2, 0xf2, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000380))
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)=0x3)
ftruncate(r4, 0xfffffffffffffff7)
close(r3)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x57ae, 0x2, 0x0, 0x18, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

[ 2607.129276] FAT-fs (loop6): invalid media value (0x00)
[ 2607.129792] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2607.140986] loop5: detected capacity change from 0 to 40
[ 2607.201598] loop2: detected capacity change from 0 to 40
12:13:00 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pread64(r0, &(0x7f0000000280)=""/70, 0x46, 0xebd)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:00 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xb5)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
dup2(r1, r2)

[ 2607.307321] syz-executor.5: attempt to access beyond end of device
[ 2607.307321] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2607.309485] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:13:00 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x1f, 0x74, 0x76, 0x40, 0x0, 0x0, 0x4000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000200), 0x5}, 0x2108, 0x2, 0xfd40, 0x5, 0x40, 0x2, 0x0, 0x0, 0x100, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r1, 0x0, 0x3)
signalfd4(r1, &(0x7f0000000300)={[0x7]}, 0x8, 0x80800)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8000, 0x20)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:00 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x400)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2607.476118] syz-executor.2: attempt to access beyond end of device
[ 2607.476118] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2607.477902] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:13:00 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x3, 0x7, 0x7f, 0x0, 0x0, 0xb2be, 0x80401, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x444, 0xcf, 0x7f, 0x0, 0x9, 0x8001, 0xea, 0x0, 0xff, 0x0, 0x6}, 0x0, 0x10, r2, 0x8)
sendfile(0xffffffffffffffff, r3, 0x0, 0x6)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {<r5=>0xffffffffffffffff}}, './file1\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x7)
getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x8200, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:13:00 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x58f, 0x100000000}, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x5)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a657076600000000000000000000f6000b30743f2c7df3ff44e0a50ea1e18029cf421778b13ced055cf9d8b117b06b4cc6b4cb221a2d8f239a3425e16469377563a3931f11eea96f776d02bc8edee01196d36b1219200f9003db882e057e14bdb97562ae76c738d239bc5f03259cc93f0410a7097a60cc6b9afda83df912f6a0961f75458e9816a65a9959038d3f17de8a35f9d56cda2c75b55ce28788676354ee36af95c9ee27f8d3ac81094c4fe5b4f94e2c4f84848a152c6571e20e821dff34a6825c44bb8b18165f05ccad8b6587ed17463c309c9213df5ad3690d70398216f568b1aca64137a9cedb6a9334c4d90a29e55ccda69ea3dc3918671e27e5f2dda54b5dd1de60acdff3a7", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x2c, r4, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="000428bd7000fedbdf25170000007400018008000300000000000800030003000000080003000200000014000200766972745f776966693000000000000014000200776c616e310000000000000000000000140002006772657461703000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="140002006e723000000000000000000000000000280001800800030002000000140002006970080001000100ec7cc4e347fe00"/66], 0xb0}, 0x1, 0x0, 0x0, 0x40005}, 0x4040)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:13:01 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000340))
r1 = getpid()
r2 = syz_io_uring_setup(0x1, &(0x7f0000000940)={0x0, 0x311a, 0x0, 0x3, 0x254}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000200))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
ftruncate(r4, 0xfffffffffffffff7)
r5 = fcntl$dupfd(r3, 0x0, r0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x1, 0x81, 0x20, 0x0, 0x401, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x2}, 0x40011, 0x7c, 0x8, 0x1, 0x8, 0x8, 0x9d68, 0x0, 0x6}, 0x0, 0xf, r5, 0x8)
close(r3)
capget(&(0x7f0000000140)={0x20071026, r1}, &(0x7f0000000180)={0x0, 0x80000001, 0x3, 0x2, 0x7, 0x89a})
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

[ 2607.749844] loop5: detected capacity change from 0 to 40
12:13:01 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="0ee36876f2f30c8e041f00000100000000000200000000002000060002000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
setxattr$security_capability(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0xa, 0x4}]}, 0xc, 0x3)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x8000, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000380)="08ee593a115c68aeda5673f18c6d066561ab32a7b5116fcc37af76628d54e4a094f3f7a6ebdfdb69ef35aed501412efd05fe37e85978f39e26d6d9b25a3a5bd16b86641c0a09a5e9434f156fa3309ea0ef6dd4f753aa138eaef05cbf8478b4a1362960abe2780c0dbfe0e2bc2058451211e71ae7347b866e04752e835f913443bb6db94a27e48943d034fd15009df11060d20fcb397100291c6028ae1cb7b47cccddcc2efb69e6748fed5789bcc6c7b0d5ebb1", 0xb3, 0x564}, {&(0x7f0000000440)="a08f3aabff67959ae68026e5ec1b8b70428f9fc088427e07f01a4cb987ac97435a9c9f1b0b147eb43ecf7a5bf2d662d4c744fce1b3d54bd83038a8234cbb29e367cea8823909245f376a13ef446b7e37062e684807cc7f4867f90b56bf6c312b67683efe2cfd66ea007dd067d30b9bdcdf7aaaac8d7c85cf2bb5156d4f3e951dce6553ed09cff0f6cf273ed15f9aa72c69cd8eb4a23f39df5582129b993b29a5cd06d28882f8b980fc4143d31d3a5a56a5e9d635ffbf7c724c0badd98df56e57d79b409c1b3b67ffb59eb8c31df15c4750ce2b01dd36a5dd1e5d04be27cc2b95fcc3528e91b1cf", 0xe7, 0x200}, {&(0x7f0000000540)="e7be8aac3bfad7e44dc2b79dd79206559ee5d8dd96ee3ba6d6949f28eb93ec2f5af51be7573c8d1403c545a3388c5f4cdbb749b18185e28a04f91bad1430e68199f0e3b86b41174f35486747c0475d644350d9cbf72d6b682389f58784156434faa8111c17db288a74e6", 0x6a, 0x4}, {&(0x7f00000015c0)="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", 0x1000, 0x80000000}], 0x2000004, &(0x7f0000000640)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@utf8no}, {@shortname_win95}, {@fat=@errors_continue}, {@shortname_winnt}, {@fat=@check_strict}], [{@subj_role}, {@obj_type={'obj_type', 0x3d, ',$!)'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'security.capability\x00'}}, {@uid_eq}]})
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2607.881549] loop2: detected capacity change from 0 to 40
[ 2607.949813] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure
[ 2608.004081] syz-executor.5: attempt to access beyond end of device
[ 2608.004081] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2608.005771] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2608.019486] syz-executor.2: attempt to access beyond end of device
[ 2608.019486] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2608.020730] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2608.076832] loop4: detected capacity change from 0 to 264192
[ 2608.088027] FAT-fs (loop4): Unrecognized mount option "subj_role=" or missing value
12:13:01 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:13:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:13:01 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r1 = getpid()
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3f, 0x6, 0x40, 0x3, 0x0, 0x1fb3, 0x80140, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x4505, 0x9e8c1dd, 0x1, 0x2, 0xfffffffffffffffe, 0x8001, 0xa4, 0x0, 0x0, 0x0, 0x165}, r1, 0x2, r0, 0x2)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:01 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x30, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x1, @perf_config_ext={0x7, 0x7}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x3, &(0x7f0000000180)=0x8e1)

12:13:01 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r1, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r1, 0xe, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0xff, 0x4, 0x7f, 0x4, 0x0, 0xfff, 0x4000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x3, 0x7, 0x6, 0x4, 0x2, 0x7fffffff, 0xfffa, 0x0, 0x8, 0x0, 0x8}, r1, 0x3, 0xffffffffffffffff, 0x9)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x5, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2608.193277] loop4: detected capacity change from 0 to 264192
[ 2608.194637] FAT-fs (loop4): Unrecognized mount option "subj_role=" or missing value
[ 2608.230422] loop6: detected capacity change from 0 to 40
[ 2608.240922] loop2: detected capacity change from 0 to 40
[ 2608.241962] FAT-fs (loop6): invalid media value (0x00)
[ 2608.242968] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2608.351667] syz-executor.2: attempt to access beyond end of device
[ 2608.351667] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2608.353242] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:13:17 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x3, 0x1, 0x88, 0x0, 0x0, 0x2, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x3, 0xf83, 0xa, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x2, 0x2}, 0xe)

12:13:17 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:13:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:13:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:13:17 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x3, 0x0, 0x5, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x81, 0x3, @perf_bp={&(0x7f0000000040), 0xa}, 0x40000, 0x3, 0x5, 0x0, 0x7f, 0xf214, 0x21, 0x0, 0xffffffff, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0xb)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:17 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="04000000000000001000020400000000200000003d120000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:17 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00')
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:17 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x5321, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x2, 0x2, 0x1, 0x33, 0x0, 0x1, 0x80000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000140)}, 0x19100, 0x6, 0x80000000, 0x5, 0x80000000, 0x3, 0x9ce, 0x0, 0x0, 0x0, 0x4}, r0, 0x6, 0xffffffffffffffff, 0x9)
r2 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x24ad, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r3, {0xfffffffb}}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file1\x00'})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x490000, 0x0)
fallocate(r5, 0x0, 0x0, 0x87ffffc)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3f, 0x1f, 0x8, 0xe5, 0x0, 0x3, 0xa0100, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000380), 0x1}, 0x2000, 0x6, 0x7ff, 0x8, 0x9, 0x1, 0x5, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0x6, r1, 0x5)
ftruncate(r5, 0xfffffffffffffff7)
close(r3)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

[ 2623.827142] loop5: detected capacity change from 0 to 40
[ 2623.878287] loop6: detected capacity change from 0 to 40
[ 2623.897699] loop2: detected capacity change from 0 to 40
12:13:17 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000200)=0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2623.916765] FAT-fs (loop6): invalid media value (0x00)
[ 2623.917556] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2623.922521] syz-executor.5: attempt to access beyond end of device
[ 2623.922521] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2623.923526] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2623.939269] syz-executor.5: attempt to access beyond end of device
[ 2623.939269] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2623.940212] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:13:17 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r1, 0x0, 0x3)
ioctl$FIONCLEX(r1, 0x5450)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:17 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
r1 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r1, 0x0, 0x3)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="000061dd6d6178"])
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
ftruncate(r4, 0xfffffffffffffff7)
r5 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r5, 0x0, 0x3)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0xef0}}, './file0\x00'})
close(r3)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:13:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[ 2624.045102] syz-executor.2: attempt to access beyond end of device
[ 2624.045102] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2624.046074] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:13:17 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
clock_gettime(0x0, &(0x7f0000001ac0))
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000040)=""/53, 0x35}, {&(0x7f00000001c0)=""/244, 0xf4}, {&(0x7f00000002c0)=""/46, 0x2e}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x4, &(0x7f0000001b40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000001440), 0x6e, &(0x7f00000015c0)=[{&(0x7f00000014c0)=""/18, 0x12}, {&(0x7f0000001500)=""/5, 0x5}, {&(0x7f0000001c40)=""/102400, 0x19000}], 0x3, &(0x7f0000001600)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001640), 0x6e, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/35, 0x23}, {0xffffffffffffffff}], 0x2, &(0x7f0000001740)}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001880)=""/160, 0xa0}], 0x1, &(0x7f0000001340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7f00000000107027cbc30ebf41a7ffac9fd2e8a0747e88bd17aa5133d9d66dfbf4e804608d", @ANYRES32, @ANYRES32], 0x38}}], 0x4, 0x100, &(0x7f0000001b00))
dup(0xffffffffffffffff)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2624.142635] loop5: detected capacity change from 0 to 40
[ 2624.183125] syz-executor.5: attempt to access beyond end of device
[ 2624.183125] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2624.184059] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2624.197505] syz-executor.5: attempt to access beyond end of device
[ 2624.197505] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2624.198306] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2624.231953] loop2: detected capacity change from 0 to 40
[ 2624.311897] syz-executor.2: attempt to access beyond end of device
[ 2624.311897] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2624.314080] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2624.335294] syz-executor.2: attempt to access beyond end of device
[ 2624.335294] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2624.337147] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:13:32 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000200)=0x4, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:32 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xfb, 0x0, 0x3f, 0x1f, 0x0, 0xd132, 0x200, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x83, 0x6}, 0x2, 0x4, 0x7, 0x8, 0x7ff, 0x2, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, r0, 0x4, r1, 0x2)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:32 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

[ 2638.701265] loop2: detected capacity change from 0 to 40
12:13:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:13:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:13:32 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="0400000000000000100002000000000020003d3439cdcdc09c98e360fc9fb88f1756000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:32 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_complete(0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xfd, 0x0, 0xe2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x400, 0x8, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ftruncate(r2, 0xfffffffffffffff7)
close(r1)
fremovexattr(r2, &(0x7f0000000000)=@random={'user.', '$/&\x00'})
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:13:32 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
r2 = perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = dup(r2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0x4})
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2638.708416] loop6: detected capacity change from 0 to 40
[ 2638.717091] loop5: detected capacity change from 0 to 40
[ 2638.718173] FAT-fs (loop6): bogus number of FAT sectors
[ 2638.718604] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2638.814599] syz-executor.5: attempt to access beyond end of device
[ 2638.814599] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2638.815504] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2638.823602] syz-executor.5: attempt to access beyond end of device
[ 2638.823602] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2638.824563] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2638.860313] syz-executor.2: attempt to access beyond end of device
[ 2638.860313] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
12:13:32 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x5, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r3, 0x0, 0x3)
fsetxattr$system_posix_acl(r2, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
accept4$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r5=>r4}, './file1\x00'})
mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x2804000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}], [{@obj_role={'obj_role', 0x3d, 'system.posix_acl_access\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'system.posix_acl_access\x00'}}, {@fowner_eq}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_access\x00'}}]}})
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2638.862655] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:13:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:13:32 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x8, 0xfff, 0x1, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0xffffffffffffffff, 0xe, r0, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
syncfs(r2)

[ 2638.973421] 9pnet_fd: Insufficient options for proto=fd
[ 2639.001035] 9pnet_fd: Insufficient options for proto=fd
[ 2639.007796] loop5: detected capacity change from 0 to 40
12:13:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:13:32 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffc00, 0xf44}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x1e1, 0x6, 0x0, 0x5, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000006}, 0x0, 0x1, r1, 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x4000, @fd, 0xff, &(0x7f0000000640)=[{&(0x7f0000000400)=""/153, 0x99}, {&(0x7f00000004c0)=""/88, 0x58}, {&(0x7f0000000540)=""/205, 0xcd}], 0x3, 0x4}, 0x6c)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', <r5=>0x0})
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}], 0x20}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf2516000000050003000100000005000300010000004c0001801400020076657468315f766c616e000000000000140002007663616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030001000000"], 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000000)

12:13:32 executing program 1:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x8, 0x40, 0x0, 0x7f, 0x0, 0x1, 0xc1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x7}, 0x8, 0x3, 0x2, 0x2, 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, 0x10001}, 0xffffffffffffffff, 0x1, r0, 0x8)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:usr_t:s0\x00', 0x1b, 0x1)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r4, 0x0, 0x3)
r5 = openat(r4, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r5, 0x0, 0x0, 0x87ffffc)
ftruncate(r5, 0xfffffffffffffff7)
close(r2)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000003, 0x4146011, r6, 0x0)

[ 2639.057706] loop2: detected capacity change from 0 to 40
12:13:32 executing program 0:
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x440, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x9)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x400000009, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0x6e, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/73, 0x49}, {&(0x7f0000000240)=""/123, 0x7b}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000008ad622f4f71800000000000000010000", @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff], 0x38}, 0x40000000)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000340))
r2 = syz_mount_image$nfs(&(0x7f0000000500), &(0x7f00000009c0)='./file0\x00', 0x81, 0x4, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="2d8fda2413fe3ee8990959acf2f06a69ea25592031a07e3b76f4ea56db932f7227f9615d480c86b6b6bc98397d1b641a55db6514be0f974c98274fb2aca01244eff6a354686731ab6316f5b0cff62be80a8e20e188e208b9c5eb99f1f2ead279f437cbe824cc4e7633a30d3aae2e3e06937a64eb6d6e1ee1bf51382e3a2ba2c3b746b165", 0x84, 0x14c3}, {&(0x7f0000000c40)="5b75a8829a040e07cb7396c0af4816a94959d261d9c3c12f312ddd8eb9ea2c0a201a84969974822afa01d5be2bfccdaf6bd4e461431e02c347f15c0314c236539536b4cf03f3fa9f00b9f3f4ab6c2b47055b316e58cf32c69d08b75bc79f066148a2e3fc933621cad08146b5812df4e0a01ee1c21a2b4c1c2a302eb68cda4ca6f8c42c2540b8141a0f2ac6e87bddd068ad2f0d47cd5bea", 0x97}, {&(0x7f0000000b40)="e83e0a6ff0152e18c3cf1b60c7266d03a61532b1d8bd1684925c95", 0x1b, 0x7}, {&(0x7f0000000b80)="5a649206dc3eee21e191fd90", 0xc, 0x2}], 0x3000, &(0x7f0000000e80)={[{'macvtap0\x00'}, {'-*&+'}], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@measure}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, ':*k^\xf8$'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'fsname'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'batadv_slave_1\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x32, 0x33, 0x61, 0x37, 0x37, 0x32, 0x66], 0x2d, [0x65, 0x35, 0x39, 0x31], 0x2d, [0x61, 0x38, 0x36, 0x36], 0x2d, [0x63, 0x35, 0x65, 0x38], 0x2d, [0x61, 0x32, 0x62, 0x59, 0x31, 0x65, 0x37, 0x35]}}}, {@fsname={'fsname', 0x3d, 'bataEv_slave_1\x00'}}]})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e00)={{0x1, 0x1, 0x18, <r3=>r2, {0x4}}, './file0/file0\x00'})
perf_event_open(&(0x7f0000000d80)={0x5, 0x80, 0x5, 0x0, 0x1, 0x1, 0x0, 0x4, 0x51e63, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000d40)}, 0xc60, 0x6, 0xfff, 0x4, 0xb4, 0x3, 0x1, 0x0, 0x10001, 0x0, 0x7}, 0xffffffffffffffff, 0x3, r3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'})
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x0, 0x0, 0x3, 0x1f, 0x10, &(0x7f00000005c0)="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"})
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000e40))
ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000480))
r5 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r5, 0x0, 0x3)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000400))

[ 2639.169201] loop0: detected capacity change from 0 to 20
[ 2639.182508] tmpfs: Unknown parameter 'f¬þ®Iç�˜ƒf4¶QýŸn
¹Ê[HÁD–ü³Õ©Q¬ըʪ÷»i/0êîÇ‘ìl2hp0q½w¦'
[ 2639.192663] tmpfs: Unknown parameter 'f¬þ®Iç�˜ƒf4¶QýŸn
¹Ê[HÁD–ü³Õ©Q¬ըʪ÷»i/0êîÇ‘ìl2hp0q½w¦'
[ 2639.205280] loop0: detected capacity change from 0 to 20
[ 2639.217000] syz-executor.2: attempt to access beyond end of device
[ 2639.217000] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2639.218219] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2639.220301] tmpfs: Unknown parameter 'f¬þ®Iç�˜ƒf4¶QýŸn
¹Ê[HÁD–ü³Õ©Q¬ըʪ÷»i/0êîÇ‘ìl2hp0q½w¦'
[ 2639.221134] syz-executor.5: attempt to access beyond end of device
[ 2639.221134] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2639.222911] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2639.224523] tmpfs: Unknown parameter 'f¬þ®Iç�˜ƒf4¶QýŸn
¹Ê[HÁD–ü³Õ©Q¬ըʪ÷»i/0êîÇ‘ìl2hp0q½w¦'
[ 2639.232511] syz-executor.2: attempt to access beyond end of device
[ 2639.232511] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2639.233550] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:13:49 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000440))
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="0400002e6b4b91976c6f22a627d9820d800000007f7700100002000000000020000000001cfbbf852839a7bfd80cb76407810a25455c38a84c8560e43dc47b9b5e3035ee28a92b1e6d3ad7fdc10fa9205c275ff19cb80fd2c49743682616560e0ffd385ec45efeaf31559f8fef0ae309cabd146b3db2c6e4c683386898caf0e8e0bb4bdd6ff2e24267a39232623e5332d97a54e315ced1cb6943d1a3d6e6d571f7a7ea8b458d9cc14b52f68f0177ce92031c0513335671f548869777de70130173a0fd8beca61445ea7a936fb8d6cf957cf4"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x800001, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x100000008001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_vs_stats_percpu\x00')
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x2, 0x2, 0x8, 0x0, 0xde5, 0x80040, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0xffffffffffffffff, 0x6c}, 0x800, 0x7fffffff, 0xfff, 0x9, 0x6, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x6}, 0x0, 0x10, r2, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000400)={0x800, 0x4, 0x5, 0x7, 0x7f, 0x0, 0x1}, 0xc)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000300)={0xfe01, 0x100, 0x5f0, 0x8, 0x4, 0xa1, 0x9}, 0xc)

12:13:49 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:49 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:13:49 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=<r2=>0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x1, 0x0, 0x4, 0x40, 0x0, 0x101, 0x100, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x73, 0x1, @perf_config_ext={0x9, 0x5}, 0x80, 0x100000000, 0x96, 0x4, 0x4, 0x7, 0x8000, 0x0, 0x7, 0x0, 0x7}, r2, 0x4, 0xffffffffffffffff, 0xa)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:49 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x10000, 0x158)
io_uring_enter(r1, 0x6dd7, 0x40a0, 0x2, &(0x7f0000000080), 0x8)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
ftruncate(r3, 0xfffffffffffffff7)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb, 0x50, r0, 0x10000000)
syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x10001)
lseek(r4, 0x7fff, 0x4)
close(r2)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:13:49 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:13:49 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
r2 = syz_io_uring_complete(0x0)
pwrite64(r2, &(0x7f00000001c0)="c7f9ffe9aa87bc61cdf84fd5e6e63a735033d7cb385824b3adc8f113f0f7c39f82046b675cfcc10e8ac899d865cd3d38e3dba57d84f42ccdac2d2e47428d689ec16f2a8649f8583738584aca145b0c92dbd366e4411f25afa6e585aedfc3d159dba0cf9ae00d", 0x66, 0x100000001)
signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2c8}}, './file0\x00'})
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r3 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000005c0))
lseek(r3, 0x0, 0x3)
openat(r3, &(0x7f0000000100)='./file0\x00', 0x100, 0x21)

12:13:49 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

[ 2656.176638] loop5: detected capacity change from 0 to 40
[ 2656.178614] loop2: detected capacity change from 0 to 40
[ 2656.240492] loop6: detected capacity change from 0 to 40
[ 2656.255119] FAT-fs (loop6): bogus number of FAT sectors
[ 2656.255824] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2656.275812] syz-executor.2: attempt to access beyond end of device
[ 2656.275812] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2656.276897] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2656.281760] syz-executor.5: attempt to access beyond end of device
[ 2656.281760] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2656.282777] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:13:49 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
readahead(r0, 0x1, 0x1)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x200, &(0x7f0000000140)=0x23, &(0x7f0000000180)=0x1)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
r3 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r3, 0x0, 0x3)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r4, 0x0, 0x3)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000010000001800e9ff933c3319cb7a301995b8cd432d64e509ba64037e744e170572f1659219c4ef3b769bf0ac2a4543c3a68aadd09d18b0a7d541cf9740d0d048550a9c65f795f739e126a16ced94f00a14f732268dbc75d3306ada30c079a530c29b5b1a2995fa68e24f15130796d39301e7b5c4", @ANYRES64, @ANYRES16=r2, @ANYRES64=r4, @ANYRESOCT=0x0])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xf7ca}}, './file0\x00'})
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)={0x9, 0x5, 0x4040, 0x7, 0xde, 0x42, 0xc3d7}, 0xc)

12:13:49 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:13:49 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:13:49 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000015c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}], 0x0, "fe45f1dd755daa"})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f00000025c0)={r3, 0x1ff})

12:13:49 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
r1 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r1, 0x0, 0x3)
fstat(r1, &(0x7f0000000280))
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2656.512267] loop2: detected capacity change from 0 to 40
12:13:49 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f214039fa"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r0, 0xa)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
sendfile(r2, r1, 0x0, 0xef)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4000000000004, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2$9p(&(0x7f00000001c0), 0x80000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000280))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_open_dev$loop(&(0x7f0000000200), 0x8001, 0x200000)
fsync(r5)
ioctl$FIONCLEX(r4, 0x5450)
write$binfmt_script(r3, &(0x7f0000000480)={'#! ', './file1', [{0x20, 'system.posix_acl_access\x00'}, {0x20, 'system.posix_acl_access\x00'}], 0xa, "b2582f5ebb69cdbf175b761007132daa851315d0b95833462416d354e5a5167cfff6adc2e63443d69dbeade360f73b39c495c33e270dfff5bb81ec8c0d47d144edff702f1e57a0e05cae54ed6f89eaeb3a9cce84ef78f4db68b8dce9b5756eb0f436195df8040fbb3d0389d7e4d21d27fcdc702675a27dd65838c754298ca6fed006d681a689822ba57b317fc9776e8a1ac86dbcbac4fb7e213133fd6285094b8c20c57c575406995036a8ead7cdee1a5ddf6ea217ec6747ddc06ff428b8b8402642df79bd5aa901e481f0fcb35c14393fd445becfcf4392e631bf3722cd2c14ffd68e0b6a09954b012ccc78e368a0414c3d873448f804"}, 0x134)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:50 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:50 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
fsetxattr$security_evm(r2, &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "6fe022e876605b0d54db16e39ab3c71b7108b537"}, 0x15, 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
close(r1)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

[ 2656.688648] syz-executor.2: attempt to access beyond end of device
[ 2656.688648] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2656.689880] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:13:50 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=<r1=>0x0)
r2 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0xa5, 0x2b, 0xff, 0x0, 0x3, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000280), 0x9}, 0x1012, 0x1, 0x40, 0x9, 0x100000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3ff}, r1, 0xe, r0, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x1, 0x88, 0x80, 0x0, 0xfff, 0x153c0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x3}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf87, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='freezer.state\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000400))
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:50 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010010200000000030000c4f10f9f0000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[r0]}, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000880)=0x6, 0x4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000300)='./file1\x00', 0x400, 0x5, &(0x7f0000000700)=[{&(0x7f0000000340)="77c9814d518e96c06fc4115f033cbbbd6ac96c5107f12744fb02bd3163273ed91777a888038857d93938f9513da68fc3aa56601f153c69589750339b451d46b70be86d26d36b58da2ff42df155608b3e5c2a418ef666f824d868609e256089680bba981cf746b38682f80b10a1b025793cc03838f9e59441a79b656044c49741edf4b5c61a3afe73e2ef1b67274d8b311079290fd2832e7ce23c61347265e806f15c78d79c9a9b2eaf9833", 0xab, 0x7fff}, {&(0x7f0000000400)="f368f8b51ae592b7152189a6ce53b99e08846f6b7931161cac2753eb570ef030ff355e7efdc41dcee15a41cec4c6088f0e9a95f951b783191ed773be0c307da08e441ecd897c84e78695e5b4f61735562ffa2619329a9c41289f9f839115e43e4353f6aa96aacc4873eefc985f5fd826beea77b7cac03bbb899ad958e64eaeba3e7f95c36161f6e829ec3b8cec2bb03b447a0fd1a6ef605a6b06c561b928ffb7263509ba5a26ace7143afe9214de43b5dbcac266f35ec632703908ac79a4d6be4533da5d506544696708b9f4fcb7c19c883c5d068761466b75f6f3c6682ee1860e201b25ece2dd38f3aee1a03a74187b4afd90", 0xf3, 0x7}, {&(0x7f0000000500)="28308391c7ef0f5219d2737089156e4e2c37dfa4917afbe8751eb5c9063ea31f1fcf98abc91748", 0x27, 0x51e0}, {&(0x7f0000000540)="c396db9bd7e184be4fbaed53f966214ef3281bfce976086e5fcb168af32739c63a4efe41cb014eddd5061fd02775100223dcfe82e7bb460c8a98a147fe931d62e5ed985c1e3fb64b25bc016eb217405c692c2ca17c5e5ae61e21197a5719a393e9e247ba98be6f3dc7f0ba27c7baac3b51f378b85a1efd6fbdabd4c7fbb23c2a3a765046bcf5787f6c86af23d0f7695b802f4aa6030fbd69b1902959ae122023212cd9469d0d139649b68210f7cc634b5cd6d7d8f195f456bbfc8b89bbaeffaed654b4f266fa4b1a19d433997fed3dca7c030fe1432269ecad6694f3af8f34ea1badbf35c2d89bcb7e80", 0xea}, {&(0x7f0000000640)="5f90291dba1a2a4a033b610cc34d72e451466cb68445433c85cf36cd1d14d2685eca54c4c120832d523c00587ec7cbc4b6971725a0a28c3db9b8d2b92b5f2e416739801b34708c1b415acd4364bbc1e583f252357822a644c99beaeb2b5316eccebb9d3d7b69f49e5cb080db0665f83bc63676af126a373ff0ee1526d31189718cd96547ecc1af77500c", 0x8a, 0x2}], 0x50, &(0x7f0000000780)={[{@nouser_xattr}, {@stripe={'stripe', 0x3d, 0x2}}, {@usrquota}], [{@context={'context', 0x3d, 'system_u'}}, {@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, 'system.posix_acl_access\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, 'system.posix_acl_access\x00'}}, {@audit}]})
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000840)={0x99, 0x0, 0x8000, 0x8000, 0x8000})
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2656.942627] loop7: detected capacity change from 0 to 127
[ 2656.944053] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[ 2656.989865] loop7: detected capacity change from 0 to 127
[ 2656.990636] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
12:13:50 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:13:50 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:13:50 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(r3, 0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r4, 0x0, 0x3)
openat(r4, &(0x7f0000000280)='./file1\x00', 0x40, 0x41)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:50 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000004c0)={@loopback}, 0x14)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3, @perf_config_ext={0x2, 0x5}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x8, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r3, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r3, 0xe, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x7, 0x8, 0x7, 0xff, 0x0, 0x3, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf71a, 0x1, @perf_bp={&(0x7f00000002c0), 0x6}, 0x2000, 0x3f, 0x5, 0x5, 0x1f, 0x1f, 0x5, 0x0, 0x895b, 0x0, 0x1ff}, r3, 0x9, r1, 0xa)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000280))
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
r5 = perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000040))
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x2, 0x43, 0x5, 0x0, 0x0, 0x4, 0x4000, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000240), 0xc}, 0x4883, 0x2, 0x9, 0x5, 0x2000000000000400, 0x1ff, 0x200, 0x0, 0x0, 0x0, 0x6565}, 0xffffffffffffffff, 0x5, r5, 0x9)

[ 2657.173939] loop2: detected capacity change from 0 to 40
[ 2657.212878] loop6: detected capacity change from 0 to 40
[ 2657.215930] FAT-fs (loop6): bogus number of FAT sectors
[ 2657.216373] FAT-fs (loop6): Can't find a valid FAT filesystem
12:13:50 executing program 1:
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r1 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
ftruncate(r3, 0xfffffffffffffff7)
close(r2)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3800018, 0x10, r0, 0x8000000)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
syz_io_uring_setup(0x3dcf, &(0x7f0000000080)={0x0, 0x67e9, 0x2, 0x3, 0x216}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140))
syz_io_uring_complete(r4)
r5 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r5, 0x0, 0x3)
tee(r5, 0xffffffffffffffff, 0x1000, 0x0)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:13:50 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:13:50 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x2, 0xfffe, 0x7f, 0x201, 0x1, "60080f00"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x20, 0x1, 0x42d, 0xc98e, 0x18, "90a198673683e23a"})

[ 2657.330655] syz-executor.2: attempt to access beyond end of device
[ 2657.330655] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2657.332291] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:14:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:14:05 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2206400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@msize={'msize', 0x3d, 0x9}}, {@privport}, {@afid={'afid', 0x3d, 0x100}}], [{@smackfsdef={'smackfsdef', 0x3d, '$^\'#{:-'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}})
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x8d, 0x4e20, 0xffed, 0xa, 0x0, 0x80}, {0x2, 0x1000, 0x5, 0x7, 0x7, 0x8c25, 0x9, 0x3}, {0x400, 0x3, 0x0, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in6=@local, 0x4d2, 0x6c}, 0xa, @in6=@empty, 0x3501, 0x3, 0x0, 0x8, 0x1, 0x6, 0xcc00000}}, 0xe8)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000003c0)={0x7fffffff, 0x6})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x2}}, './file1/file0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x80, 0x20)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r5=>r0, {0x7fffffff}}, './file1/file0\x00'})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x2, 0x90)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000a80)={{0x1, 0x1, 0x18, <r7=>r0, @out_args}, './file1\x00'})
io_submit(0x0, 0x7, &(0x7f0000000b00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x101, 0xffffffffffffffff, &(0x7f0000000440)="92bec488f5514d46b7ef5e67e2ca9bd7cb313fe2f492f120002694ffff40f3238e38b92d67e6e3e5e6e1bfd8dbb8ab01ac60083b7715664f241c0dd99e4aa890882ddb886aeeda807f10c5e5b85a5a026530f865606baf5a49724cc527a11ba836d9f1649b34c2cac5feb23e2992f1a9b14e0137ea8769dac34228c71a4f78d5a238fb11577d724bad51a5cb857b9868021649ee1c1f730a544b27ab7de149bf0845c9416d0443932510138096ca8e2f57fb45fb4fc4cf143546466ff22c1b5b84306380223ec89328d8435ae4d9bb97dac0", 0xd2, 0x9, 0x0, 0x3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000000600)="a7584ac4c8d278b1583d721873ecf9cbda13461bcde8a3bf74763cf21e3263b43eac6eccf5f34e1dc5282d81360f3850e3d3486d35b05f119ebd2e58368fa80336b28ccea1550f32752b02d0f7723495cc3f662159038ca2673d94b427b366e62be2750d9dc350c77bf56181df9b212fc5ab9b9b58595dd4645dc69d0b481d93979eb2cf5c32e186a346b80a242657e0cb9f52a7c36f89b12264c39c78ef4ec8b257b498fb14b95c644c931d52b073f4882e6452d82be16ea027ad5966f5513b5412f2f1e3e912c01351ba9d1fd86507100c3aec7bc2c45f29515e371043f983ef4474d182a4d67148825d3cc65c9521f6f6e234afdab0", 0xf7, 0x6, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, &(0x7f00000007c0)="ab08ce2c519500d873d86f3ca887baa67a2fb7b0c3028f20bd1bb06e79ac19f7ed229d8bcbde970c9e2faf81250f2673eb3b5b3879292cfcfb2a339117cd2cb21f7d16c2b6cb9cc1ed585d15588054d5c576857a7a8399b01c0abd3e4f48656a2c62cff631ef76c3d14928fbcbf54cca5377b9b68cd734a8c1f972b6be4ef84e4b15d3603889aec524f1080fbbcfe4325759ec6f16ddb8ef95273b5305fb6cec21104f8e", 0xa4, 0x800, 0x0, 0x2, r4}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x3, r2, &(0x7f00000015c0)="d7862dbd28f9c7f2cfecf4812b1ae890d989b7bc5d3254ea0887f6f741b25a8a66b5b0b80e7e89694f1743240bd13a05d52308879b6f734ec25ef5d1e2d0107d2477607aa75761d344f7a735ddaa4110f9bbc2315e1a7b84fd72d710fa88ca62986e74ede0911f05f1b9fcb1d1e7ac7fb05ea425be182e58d69f7a07a6461f204b19f05bbf99043bea7060ea0b24014d21fef61a44b0b7e37dc8ad38064925eec04e7fe8401f40d79ec22e0e5c53487a4f73b165907f1dff303aa39b2c9a74f7f9887568183f2e936f7adb7efbd3e20723f95566d559db2c4febf08a21e63aead11bcb810c0f1f934402dbefe020aa6db855ac44723e9ff0bfd308a7b5fa8b36dc84d4a880ff3d0fc504d4e0a5bcd963614526556b815fbc430a4006731cfdd1a29a9d0876fb522d4f0f9803312d2e1d4fc5de0217468fcd63d2078799dc53dfdb476c8ae4d835d0e3e455ebb4177fea2d00569a39545d0b5ac1e02ef85d714a31eb89c62e4cdd082b30e376363ea81120246197f2197db626d7fc3ac3fe7975a35e3e7bbe4ca4c4ff5db43ea43ef3fdfe9de4ad75fa3eaf44b89cb27f0bfd7526913a9fa1ff5731133578703a9669e20a70bdf9945a172dfa3c4dfaedf460e7a9fff5d675b6f2083a8c721dc4599670212c198d3544f14d11863d924a9895cf60800eaee72a2ea0a3d5666a0eba9757f48f5a1ac9717a4bf513f80dde57e47bb6e050783abf09f367788a957fe9a24c304f3b92f7794d882598640c695382fe546a55e2244fb4b7162f7956e42c0c93f9ddeda204e2e8743d9f9d12ea2f5cd2a72f75802918b79a23b3d36917bbff7b4f37344d75442a451b9525bfeceb9856705bbe7e9301462cf84e420b49e1ee4bd4e8a7e7f98337e58f2227242891c90ec6d0dc70167b83cccd69fc070bfe034e98abe6daea319a6722f42f960eb5bb18745e188c05d6cd82a7ecee7a5cc11cf630e9c298b91d8355a3eb4573f805f901507e5e9e8ab46009e7f6ed1fe1997310464d25b3efa40fc9a8b5931863e47ae2891287d9273980dcbe727048b74be5b7cd579b535e9e0eac69500d6cb334a957a574779a3a0a49180e2422556027d133ef6746e1f757be392d0a14b62ff4e09cd5a6b753d1250dbc03011760e04b5ba5f7aad02a3b007c03a207ba9b3d1f16deafc45ffab223752c76198e7e32949c15275473e8bfc808766d2b5b8863a3f2dbff23dfb54cb253f049ef75ca7cc64ef99c97b12a00f2be89363855b62846b290e572f11ee34bb087f52825585257ae19d4a5d2f3b7a549e69fd5f196e45fdedf950436cbb21f017e4b77e0e3ae8ea0e918cbf852e062e22843871be7d8ce0b4de2baaff1e59725af8587617bb1a1161926b21551b7086a86e1e331b11d5a0e176f84c9e3ff93680e265cf4385656e178806ebffdd365e9c4955a24f054b4c10b4808f63c52b6cf22e1e1c147031c16b4c8636d0cf5513743555b1e1049c00e7b32e43ebc97ea5ff9c59f27d90fc66402c8ee34ec98c3731e42409361f8761bbb250658b75569a01fd90871c856d4760b6e09df296b2c6f6b406f266cd6171052f678ccada7c8bb6feff8c0da7106f0222b3bb5d72e9a3a7989aefcdf1efec4a364f179d579b4a9d4b9b08f3ae235daac6ed315f501cbc0ee26923a1087ae2956484926fb0b6e3f6c9a723e0952e3da2d17ca52ab0fdc651d137037cccf46e51045d64a8c53268eda76869364c8c619e03589a2a8741d7db5d1acab8a0c7bafddea02232ccc3bd538f0ddeb3db021a9a7c3555eb3159afa8b0356f303ed126e56d798fac4d3a1e891b183d581b170abf1f50ba0b05ad50b730d2754b94cfc1e67322601f8c0555a1f3a437b00a9bdd054c958982e61a7b408ae59b88abd89a8ee1450c85b26189f3191b3884aadde2de812c059b75664160970e67525fd002c1c7fe5a31a33b5457d8f63c58694a74a00ba3c59c4046501e97903aff0ce51a2c5c9e28e87fc3b563d7aa00edc2b79a4bc4d351cb4d6f6b84cdb734bcc59f8148971cecdc71877f83707b5116da524c451aabc32e5c414e5ad98f5faa2ac44bfd951f67f9f5d63cdae0d893bb3921e4081a8f6004a7e11b0c512cc3cbcab7a57fe5327a785f424a472ddf705fde1bb958383bcf6dbd11621740de174cf9c8f013facf92011d317184603e339a1918efc8721d0eadb27b6c92c18cc6aad4fbdbd8daba4fc8647808590fa6fa3065a6316441a4877b9012bdc3b026bf5995bb8d440d9923b97c1c9b6da64a2920fe09e02295dd44d9bc110dd358cb6a3dcff6fea76f009fdab6d2687f8eb312d784213b4f47fedf2996b6bf99ad9ae730e47a2237de4f9f9f1ae645ec788a0dcbeb633536bb4fdcf264a705a997e0e0207524635c9c3a5ed721e761691554d3ca1a0d004829250f739f387e238a62d22e784b577bac97769d9ae8083d4a659d06ca89d67ea1407cead3998dc575c096959b157c1a57222cc7aff28e66975a1061ef28527c6d2681ca851b413cb0518088dac0b11ddcda9b8024a1182bce74bebc6b276bd1809fea52fee38342bb73ab009e8769f415d6b5d3e01b59040b2ac303374699df3164e4c71a3c435563da6f9b0820a4000473e7444f4d763cc19eda9a5bb0560989538465131bc54b93057a580214ff4dac15898213ca9a18eb96137544caa60df8191b958817899941f40eb7a75607be71a81e6b2eec68a33dd55af1dcc18f7ecd57d275a98636c0c21402b99485f2168bb7c58f53feaa2ec4c0658b0e6802e488a1d5c43d634808678ca7339a1cded8368366a2bee3805729b6cb4b68fceb532f7233b6e3fb069fcd855499fbd4b6230cca38ecae990d657f86be694d355140edb8ed6a271b875c2dcc06e6017060e9894a02f352049eb1a801685adb1705cbc99ff8f7c162fbf1ab1e1ed970b714f0e0f889e0393bbe741b5f2ed432829f747375eb6dc50b17aa30dee68dbadcc68f11abed341954737134e43a4db6c178ec3bc3d19465b164b70ae8ebc4534bc440c91b6491a684a02589d6af9360e1dd616abac33bfd706d6ba5b230f87110a380c837e1701d806089404c34745dd8ca4962f923ae7deca028d9fd2ee0ad6a158d17f1114e9244e3dd1afb34f0c384b887e3c09181a061d1f2fa2efe3571fd0f61f5188c9c96a5d2c6cb7a543b54d56c16c715acfd696e8d3de210f7afb59b24c9a2cf014ead29d77f29db51400d211b6162e9bcad93b43295465fa7339da081fd7b4c800f519874aca1018620f311b89a1e88cd923bd02829248a2fe0963292b253303d93dfc99046573824e9634735b6415dd36d79b6f12444b1e4c9f9aeace6a6903d9b604361bef45130d5b60d5933a59376724f5a9133c2c56d050e67ef55c6d74406358ddd233bc99556fbbf1d44d0b37e637539c75b9924d74e2adad5f348108eb3575684788678b5784f0affd4e5ad0efbac60e5d463bfd74c9501d8cecd4a4d72fbe41971c7b4878a9103639ed0ac56246a579086e285433715b2d254ad6d52b55c4a8abd891da43300280af77b00be14a4103f24cada220b915c83ddcee570dbe9d211bb133d02c4714519f2217534bad4d3faa9832c84e5c60f4797293879109c4de30765bbeab59b90950aaf4100cd729990dc294835204dc1e9ff1d853b7c85bc2751efefd598dd8195b22486e7118ed6696ddbbbd220be197a42808a4a81f6871c70aaf32b21ff5aff9a9f940a54a6e7af9f7b0b47424626f6d27da896c876de1c39353b10482c1423a8f5bfcf1579217f88414aa3160e00b00e3d6a93a79f33ade2bac80919d0ba5f4969338e43be7f00c5477d067055058a0180d2e118502fd22ab89dfd9e0e1dee14929edeb32450ab245aa388ead655443caa454e0cb90a8d1a5d9228b418f3243d1f70a94035b9a6206fca062553a3a8c33f6c70cba514a98f610f4e8fd45ba5f6c6e293feb88a0aebb8422db02e86c231e332c3d70fc8b10594c82d487a7e973b57caba19726e30dd2663f16cb29af29a233bdd976355606c567d8389f5a9d8b104ca72a4eb02fa1962d79f9b24025b487135d5944b665583492cfbdf41d98aed2c4d27de36391c62d05226b8d271586ad72fa35bed2b844091012c3a640eb1156b4b4ac298aef740c3651bb67aced686d92353aedf1977d6c06634166d33c7016c00c81d5e9067f2a49f81f2c88da0f5e9a6deee97202e05268852bc7dae393fa4f7552072e15394e025a30bf5fd63a4ebe6a504310183d6fdfffa74a9f3aa24f028a8c3368066163f34e0438eeee66c5dae23f0a6ca223c992532452043889e704e582d2c8ae91d3f484be391bd1a633114658fd2d1fbc2904fccbeb39215a2de49673e2e904fa39ae7ff430b4cd334a8aa7006540d2bc9eacaa6f194bd927d9ad15081b7a27a3b36887914e68977979685a66c76fcce0d5665ac10d03df47cbdb5f0ba68460fe8bfde12b1ee9970b415955dc41c1930821ebb17c249778c07bbe7fd15f58e07ad98c62169fc4dfdde9a96c7d07ebff0e73098fdf9380070fb1dc044d27548774382a286e23fd786578ba682be947b0102e5cfc1715db8184099e40b75d636bfa9006dca98d37470b6e83bbfcc0e9f2a98c0006ddf2029965964bafc1e35b099c521a10608855a01d79f83c047f6e47320ee384ec10dde384fafebe1e26fb78f79b99f95875aba4509715156a85cfeb5a1ab2cd65a017fc1ad021fc799e08e065676292aa313f7cecfe81c461048bbaaad45b39c08362f89f2b541fab5cffa2d9b93e0effaa53d80d1da1bacf5966131eb3a85185d609c704e8a2a745ee671e8764f7415ca97926fd7bf818cf073294ba4a0dd268d3075c4c88edfbed0325cf656e60027ca5d4c01af33897f507b65fa5e2b1c501703d4ff02991d4ba2e378d953bec03411fb9348e230f3649038cacbc0608e71d8cbcac4a294b384c8f7b0ddd1651c88a3f2a612ff703d4fe8916a8750aa3c982e978489dc0232fe587b05dfedfdebb6d89df6a07f8cb859db27ad975a3b55b7734c5c6b6de857a11ed85ed717c0603b174eaed411f67eda89029dbcb5f20c4c133593f9ea00c681d989a093a5d75e38dc477524bd83b714089b6454f446609dc496be2cbee890ef8c90bed1e9d236071af71c9be790e932a17ff236c6b0d636103e3ddbf1103248c9808f7e61238678aa0a8b0fb152ffba4730e24488c60c32d96cbd354e1116cfbb80c2cce68ca01021da13ba6d72fee602dd5e26d1219d01bc87ffc9ac80841b3702e59130e6a43136a08b7c95883f79c2afa1762fc95ae1045fe00006a821addcd648b37b9e733050623c7eda47f277a0e22842ec9c7cded21b8eadced76d534576a9081026cba6947c95631462ca037d086bed0086ebd4fee91ef1ce4fd19adf13aef11a0cc247f75ac2a3e7047b163599e961cce781e188cf66ff7e05f1e4a0bfc236cd13bca52f87a64ad215b0928068b43963a6353d58f5edde89688fc559b9253976a55c79132ea895bc42a8d8d67113dfb02220f704f92f6c3bc372cba2590f6be066566d90da73474d5276da95c83621299e09d07a29dc3811c12a89aad53738baa1f0bf56c13b8d2d6a673708673b6012aa18a8565154066faf7db4b60d0af9cac21187b6ea08c1a3b82d89a19834d0cbb5ff01a1c310c9f6cffc9e50348827b593ef257896cfc7bf98252210f621ed5458c4f070d63704fdb9f6d2aa0dd88f28fcb4473c1e2d3de15856cddeab70f7333c76e2ba697b980c21be6ce6e5e1cf9bd0bb0dc082320122b", 0x1000, 0x6, 0x0, 0x2, r1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f00000025c0)="be0345635a7fdb00b3f3151e9589a715f647e313dd24019d817307d141d04288a9057c1b564047741bc33089552e13ebf3b470d5dc5ba622f3da841e8c6b980beb13785e03d4a1ad35035f05ccb7bdfa3d8b5c4babeae96c0aa9e40afa99b2293969c8ebc870a268fe4a26a96e9ba4e2b939f157b96d16d63b34285fe046546db3025f6e3fa629e069abb06c97d5eacecf48d7d85903aeac2be69b82f9c17e8799df8b237140ef4a82cf73957ed5dfdb7fd3744a8818a2fd704ca5328f66d152c73532197933ac2ecd3144115b410b058175bb104dd8e6787872dcf3d9280de1ca4f4bebad42bab91057cc8cc6ba5b33502bce38a5acf8e38a8e0c65295c988c92b898a0dc61fd348116d3b94923e893082e6deba05103b0ce05ebdb4d97785874ba871736b3ebb7b00df3baea77145d7b84cf480f25ceb646748601f4b04d29210873a9f29bbf9d79da635e3fc74a029bb0d4072e5f14569f4acf9f1c491dc627a7abf61828ecc3b350ace6696a2ed7c5fd9f21668c62c587ab78b0ab5fd3440a5329b88bcc6ecb005f2d5ebc86d75730e666dd14767faab85bd305c44e11cf89b240250494807f5a5d9892be4b0cd8f46816914e65b2fb2a1f8e60592095e6d09ff0a26a9baf2fba4abb7e2a0cc4147ebc97aafc4b551598d9b72bdb0c6391d6ae54a18f2ffaa8b62916638e7c44f1c4d9ea640f8142d52a03704e42ef267c705418cd16d1f6a3f57127723aed28558fa128f645ea84ba948d28376275741844132f3c82180d119f666975fefa78a54f120ed5174a4c25e4090fd3389505491249fc0a60c2d3d1319714c71e32a3fcc96cb48f25cc2eba643cb4719cfb9f0805e0132f870a5fc84ab5696429c45e140d0abb891b19c56d37ba22eeb6acf3d7dd4219f561ad017e88b835cddfbf4ac6f87a28061431ee62a6857dbac95492c26ba84569b1b623b4ad1860a0bd82494e5be6feec10ed008a293f67932b70754641bd54de01f1ceb14650c8fdfbfe024f1fc2f7aa0f8171ea64e3a99bc47f797717de2bd650262bbfc148464f00c5da33d9ad86ada43edc258e51ac0f240c03ddd04ffc5ca4ffcbc4a59d98ee2422cba54fe49ea1e5b8ce66ef9ba4b7d80b40ef8bc2baa229f21852ebd89e83786d7af68e00247d14699186847b5a429e0cdb43f59afdbb17d2035c7cb195d58d93c85574e181a2b658a65e5f3efd3e23b6bf35b5620c90f02201afd037f5fe95858ea83772cbb4818aba2ecd3590b6fca11dd2ce9422f23c06d1767b2a750c65ca096f5cac8a291b2f6447f20fb9297d2ce96ccf6c241ba1d4cf673c09e4bd8113572d7340b073c9c50cc3fe7cb87de9da4870f607dc1614fcb1b3dbd525d1fe5a483a43e1deba6b64b6565dbe01745dce420ca2497a83767e4c724a924165229cd7aa5e7dbb3f4ccfd0e41a944e0a9d129564e51ad28a4124be378227e46b5b31e5f845e7e14bc257faf5e434fef20fb9089c454087083c95e889b1ab19cfc39c20beac226cb7ee7f07b12ca3037990dcfe50a4e2a1b4ad0e1147b09adfe8bee3fda01ce0fe0d3c5aa72e5fedffd8c4b41038aa8daf9773adfc9bcf87b0382c4b0c4ed6dd58517b75dd953cf96f5873099dd3bc66af4ecd8e9c5a9436ab8fb075476ce5dc6a393c882bb6808afdada16b131cb858b7ebecee0196df07d6d75c2129b2d983fc4ae8d08e33a3f17b80b9211c5c0d876f377e288d567867e1e14248ee557bb190f830d96ae86dfdc4dc7df131257d5dd740676de33f0e928be033a8953b87cb4f8eb465e0f2f7c74d0abab45f4253a3e76cf56f847dfc7b340b8ce761f04ae306e27841afe776e9ba10dbd07726b59ac6e33c91084146ac32f9f01208285e3dea978aae804d6d5b47dd4e3d14379dd7f8bddd1a3ec9f972f2043f6b0fd8fd2b9046f38a349f995caa03f5c1c0cef0193ca30c071e4dccf8db23fb905a601c482e95504214ec37733e88436c3a97109180824494c7c96ddb7de7c6edff2bd3e0e4c4b75f1520d6ee784a9b8cb83d06e397810c3fe5a86815608b4169c088fe39fa6e43924c60d4dd45fa8e1b56df14e514ec6ce9805e6b99ef100547c953cfd93bf1c239565b8c091dde825f1bbdea9da3ccfe0250e512e30929a787608dd20786f270ccb4d54fc7bc090d1c1464a8ace7f16284cd1cfcdb85ce1e11e2d2830317b032023383fab4f81ee5d45757f727fa1adf29f58abd9cbab86a240bbb0894543147f3e866ff48218fc8331fab71d9c06115d620cadfaec16a7925e872b45817448daefe585d477d8f16d4d0f5f3d0b6d16ab1c1b6c67dc70534dab906b5d164fffb07fd0281caeaebdd042ca0a0a4516b2a39ccc59750420224642be7b97c486e024b45f36c71550dc3c43da40e759592d3c9a7c5bab5d7372d982cd51d04f1d3dbb46d449568ee253f52a26b15add16e1b402e1ce8841571469a6a2dbd6d378f624a7fbd58daf1631aa31b86ba7e27097f5e93eb913798ce53cacb019955d7e0552ab9d0701090ab94bba418e689f272e1716294dc269f182a37cfeee8a4f6cfc2f1b7700e775c3eef3a6ef059f33b96d9bf59abeadc953a67d42ad309871f2bf44a126387817838a99b498818dfd5bc9f2a32f6f88b2855375d6ea677c06875c7f5c918912cb97b1ed8683b169cc50cb4112bfbd39252097677c51ad9f9b22e13199938a0818ea3d5ac016fa07bb4a090034844afb3c4dafde62c8add8b3bdc1aaa863920df2d913f399bc8beb23a268840153e665e759479d39d3bcf9ebb881c0768402164b8ccf8ed661cee5aa8fddbfa013a3d718ce9b59ab2bfb4444222b02f2c6590260d59dd81327abf3df07b232913ec98d5c2b7501acfee679e42df68957f69da0a81345a0b07d1e431d7e41f3ad221e6d09cd2155543a252e0f736052ed2367121202e338116e4d3fc9163b94250230afd886286b98d3ec995e4fdcf2f1ae5b508ba189a83921571ad541e2e4430254691aa1fbf0a291c909ed24588530082beb49436724cc217535fb2cbf99412c5f317fbd78d01abeb3f2e4cf70fe89426afccb138dececebc42d314925809a456d55b39f8c7e1670903f5adfc937869488cd1438d0d1c929d639ded50b23b7466e7e149a7b628ac5021d5f7c7d487997386e3ee8b6849c8910b8570263addbd2fbee96aeda7b2f41cee5259a305d8fd8204275c69ede13a526305af6d5b7cf5c4b6d32832bd0968ebf708acf2c7691d805eeee3867c8ebedd64fc3015a80f5a391eb141aecc86e025d6d505b3988d7f6889d4f5dc24b7c05850234e1376344ababb879366c89eafd3510b8cf3ae38ffa8fefc60a305a13f47bcf19e645c621bac1c4ed70de365842c6b498da948e714a036d73d3fda63220fa68211b3b7ebe8dda85eccbf6d423aaabb492f74bcb105203d4f55eb11fcf104de7ac425b768937f024507180d09a2d84461ff08dc6a6c2cd74d93e39311697fe9d8b14c27c66f62d3b5267aeb7cc20a5ecc12b4467c530693a05d68801e64c3ece7e2abd800826c05d8ed65032e64a28bbeb4843fd3165eb04c8d409aa9219597a3f3eaa74e1cad35c80259501a6c17de9ee2c918e1b515a3e464686b58d2269d312e3532dca784dfd3825c591aca8e7b1f844d1d11507c9ed77e3a9c33a3cf7f7ed3e0ae99c7bcd915beaa76d676749d9245ff42a299dbe1c8e071e7fa186e104187b01dc225987dc0b4b1bdd490a7e6ffd007f9dbcbf5b79e823119ea37695d422dade31b08fa70d2a952941e0675ef9eb917e189225afec98c004183260ea74cade8b60cd4101ec5b1dba59f3aba9ac2789455d14d4988bc5ea19b9f1f1385997f2d4d0c8fb2bd826d53edbd2ef91ebb1e3aa028482e1668eb99c7ad93166910970b495841461d8e78eb692b0aa3f138def1936d263239b611cb34d2eaa6769f510c8de429ebb9e945542101b3258a45a087631196a97f79561075e2b7d0b4cbef94058d489df7ed8b1b9117a8f3fb94f803bccb4f2d67cd5feba622acd514eb45be2ada400e6609c526ec914f9221d921d8b8ac1ccce3357fac8cb029da7a4c00a17b376750ae09fa9d7a4fe61076bc344e193a428386614631407cb2f4a3161579175315eaa7f84c4eb8fa100d3e62f5c63b628392cf66afce0a557756983eb1304b2b44dde19130559ef056781a333f5b20b6b4d20c7f68b67de5e6f7ab3826d4f6707e6a975fca41071fcb8a5c1342c81562adc689fbc148b610ccd47c306ed5258805f08ce32858db02584f60988453bd4e797e95737989e75a30e81eb65e955927ec287840cf1ed5d6aa2f0875a82e77f91001394dcdd9668b819cfe3c91c84dd373695ea6f3418c38ec159cc78035105894db3e55560c3af5da94dade40d1033f385506543362190ac43794c87085924139f05bf3495fcf0d26e63615c4c826d5595295e58ecfc6f8c807785c161882314d0a34127266f64c768442a5f1662bc0be215709bda04c0a0a2e142863328a67d0b4c12632e9815cc98f8c1243a35f031f5ca88e1025a481ca14e9de3df4d3e50625a5c102174fb75f67baa1e35d1e464f3293c130268b0d8cccf77c4020b0c26635081991e32c3e8929cc8ac026e31e5d1d98324d5667bc85bc733647505f47e203b918e469dc0110ff9b0d813b60915e9744474f1e282215caab964ab367a77175e5d7e26abdf4ea2fc887a3f63a07abce83a7a0ba9694859f581c7632f096018ad2493fbbee204e562633d3c98e529eb26ab641bf384498cccdb9cfd43e2a72720c1720683404b13ad7e6d5fd69bb2df2daa0486b608233b12cd79c28d9bd7ed8cbebf604b27ec87dd368f11ba6cbce45f8bf2e037d9f4072193aa8ae327bee26efb6f464c2f8e01f195ae78e0dca7636bd864c1f7ad1eeeb69adeafc4f7bcf0391283a9cd6cd5b4561e97fb92b3a35b52fa05f7d6736c8d524eef0fd9860c9d693d9f270a23d022fe30cf55774c5ac0d2e556849de3c4cc78cc250fc8966b02d83470158acde131efa2466937ca324c495e96d835a327a2a33db69a2f114646b16acfdcc030f19c103d26b4124e61108d4af18e98a897e46430b50b858e7cd35c945f056cb626902cfc7f29cbbf5868e6efaa11abd476fafeeab86901707d13425e340281a682db6822b4f29fc2b52eab2db35f53edf33b9b07f144cf67abd663fa779aef6e21f31edbe9feafb4d27dc7ebf2c823c9e946444539d02733aa60d9b4ecc68f958341b505a0caced6bd0f47a23190d6f872f75e78adf79d046bbd22a06e61b2ca1b725002d7611d1a9cd65e820f801959ed5d4a2770202eb794569c8a20655c9deba0a7a16551bbd578221df51793f7bad6b1657473f7fbf44796e33613eeaa5a7ccd8d9cf66afffa8c359bb946da5d976f2fcfd3818397883c8ca859801bd3bb99a34cc163887e84147f72c47d289da8fdb103d44f21b038b1b19226693452713b34bd1043133d6b6056668179b5713501edc38171751e39ef940a653647d1cce460bbc6fe6e622769e157b7502694b3033d84dcddfb6d16ea038c19546f3e9290efb4153764f53a248400edf620f437b81774d64f09080fdd7f925be7a1ba28bf4ba97181c2c5512ec10c3dc0d04ac912401d4202e4ad660dddd0c9b8b4e1220c2065bbd874935fd3996727271479e6053e4fc9d5550cf4f829850df24aa7f5d1ba83c9393a8cdbabf3d29f6a584f50a50d44523c48797ac7d72d8d4b53c375bcc85703fd64d4a357b37f58080b9bb94923686c4cbb52bcfab5481f531437334bb53", 0x1000, 0x3ff, 0x0, 0x2, r5}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x9, r6, &(0x7f00000009c0)="aab80e049ce27775e7da7ed07d686f5107910ccf3620d81286fe362d72ac7d513e4000ac85078b45f3c7d93862123ae3651ea934332646", 0x37, 0xb3, 0x0, 0x0, r1}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x42, r0, &(0x7f0000000a40)="ec216829bd9141a29b88519df62c01577d61614913c25ffbda9607e374c75a8bf55e9fdc2925a02e51cfb2f368a1f895f2e224c467d0b41050b8a6940607", 0x3e, 0xfffffffffffffffe, 0x0, 0x2, r7}])
bind$bt_l2cap(r3, &(0x7f0000000380)={0x1f, 0x1ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0xe)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10005)

12:14:05 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x5, 0x8, 0x1, 0x7, 0x0, 0x7, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x4, 0x0, 0x0, 0x9, 0x6, 0x4, 0xffff, 0x0, 0x200, 0x0, 0x20}, 0xffffffffffffffff, 0xf, r0, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="2000000020b9b365c6bd96b17e0000000000"], 0x2c, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, <r2=>0x0})
perf_event_open(&(0x7f0000000340)={0x7, 0x80, 0x7, 0x2, 0x3, 0x6, 0x0, 0xfff, 0x14426, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300), 0x3}, 0x40, 0x80, 0x80000000, 0x7, 0x5, 0x3, 0x9, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, r2, 0x7, r0, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400007, 0x7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd33, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:14:05 executing program 4:
r0 = syz_usb_connect(0x0, 0xb8a, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0xd8, 0x9a, 0xd8, 0xff, 0x90c, 0x1132, 0x3113, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb78, 0x4, 0xa2, 0x40, 0x20, 0x81, [{{0x9, 0x4, 0xfb, 0x40, 0xa, 0xed, 0xff, 0x95, 0x4, [], [{{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0x31, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x62, 0x1}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x5, 0x13, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0x8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x4, 0xff, 0x6}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x4, 0x0, 0x7, [@generic={0x88, 0x21, "b9ef6762d2e0f22c380be642cfbea8cd3501941e7c0cf836dbb151b57e0b63ea68686dde0c6750bcbf139c2f437e31456bfeb9b875fefebc6740934c8157ea1bf86b5ba33bf8f8de3f05eeba4cb741b33dee1cdc281347b410ae90a8e18a519fd8c4ea1e64a18a862e762a2919290dddddcd53b7786bb6ce70f1df69b4e51d8120f78392e0fe"}, @generic={0x8f, 0x21, "8407d48d321b14c1afc04af54e0cc9a5b01e67440958d8996f751f3a79fcf17cca22913e0608d3fc9cedbbdc7b44166f8fbd8fa2c1c66653d4a78f92c28f6e92c591e02623b858341119698964cce49e92d421fe99ace7c002c30f7e519dcfd97e801ec15c46142a39d3b7ebb3b67b23b322c7fc0e2e2632b31828ce764d20e68422212dc3a7eb8f1bf47e7b78"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x2, 0x81, 0x6, [@generic={0xda, 0xb, "c54a0848c8396763718650558295cef419fcf9ef3029141a8f478b23b1d263e26dab1ca77d48e7b3983343db638134ebcdf50f8fd9a8ee3c9ab17d35a4136a9f04313d7391c1f4f0e3c4cbdf5bffdd6015c2779f617d5ef69aa92752809ad08b15dfba62d709fe5fe7d6bfc2ca7645a3b2bc653098fc120280fb4604f3a73f5bd67c5b128a2cf4d5b6e8f8a573554f738b7d9c9c5d7a3fee359f8a16e15cb2bcd52bcf4c6689f3e865b0cc2996de8ea420ae49fb506210e40430436e8112bfc11ffac935fc309b56114060d8c28e4840ba7021d1df79fe54"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x2, 0x4, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x80, 0x3f, 0x4}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0xff, 0x0, 0x4}}, {{0x9, 0x5, 0x5, 0x1, 0x400, 0x0, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x0, 0x7, 0x1f}}]}}, {{0x9, 0x4, 0x2a, 0x3, 0xc, 0xea, 0xf8, 0x7e, 0x7f, [], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x2, 0x5, 0x8}}, {{0x9, 0x5, 0x3, 0x16, 0x20, 0x1, 0x1, 0xe, [@generic={0x8a, 0x9, "09f8cd8811edbca4ee321d05cf5c32e737334da6e44317580c969f013a229140745a469d24aebaa5e3738c710ef4bd7c9f4e551788703956587c23d4fb8718694172edae04b46a5be6a9423e74722679d47a86edb382ae5c7631a9659edbcc0b46512c0fbfcf1249eb028eaaa96a9fbd03c25e4137d53a7679eceb488e6ee1d20de0142d1d73c203"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x20, 0x16, 0x1, [@generic={0xbb, 0xa, "df729ee9e7b472cae9d84095da8c067f2d8376204aae2cca8288bcb94f771761d37fe6c7861287236238b989930b2262acdb522053830463b763a0f6994bc435f45e88208af11dc95039df42687196519de6ec52814a439de7a059b35ead708bfffdce847109932ffa3da5a9826cf88f61772183456f5af8b4be52742d0a6ef8c96742ab4df1d851847217ad2057f00ddeb0325a47cbdebb68173d42cfc4bd1599dcc9feee648d2de92ee9fcaf954305f3d2ce38427d20b236"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x1, 0x86, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1ff}, @generic={0x1f, 0x6, "dba66846fec5fff1ab540d58ac3260602fc7a0b38eb5ba2f3331b97021"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0x0, 0x9}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x1, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x3, 0x9, 0x81, [@generic={0xbc, 0xf, "e2c0152c396cee886d0e3a2c849b75ebe8207d35288ced0e9578e4d78bf5ce20021c75064ccacb8d141e2313d9f9c4f8b0363799f10b3fb944f990a0d097c60d6665daecab097b5f0734b959e17c7b394178b37c59d52c48d6e9c6c864666b4d856630ff213db25bd0fbfd7a8bf5c17b656ec3bf6345b55a3fa1c4391d1adc9c729730924e1ec5f1d35e806248be950d0df28e2917a275f7a8564a2fd963f3838d70ef97b3fd7ab848d9dd9b582d25916061c7036ee326b92416"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x80, 0x3, 0x7, [@generic={0x3b, 0x22, "a50dc2c1bf2df9ad29bc429a60adf9e8bf8f22ae0244c9cb75713de977560c0a6e90947a67a94727b35dce2642f6a1454fe648513d0974003a"}, @generic={0x5b, 0x22, "c1ea2da822a66623161b046d568794a92a97aae402b781dc8ef3df13f7573e105c96c4dbead6e47fdb03b905b1b7255271def35ac4be22d6518aea9b4b16d0375c2fd38f31b421d773c124737d1c556a99d472aebfb68e9e1e"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x7, 0x20, 0x9, [@generic={0x9d, 0x1, "f382d61b369ed69570aeb2380fc5d82c801256f3789d9a74a12b8b2cace52cb8cac3d15e7d0fac61cc1cf8c852d83aef49d8e79687707410e151ee61655bf6f51191f4783762615048dd741262271b5e04223f1346776f8227aaa59525539c331b565300536d4da26b6bc6ca5f66dd28d6391886a512eae22f3fa2d999c0e4353323c9109789d4b5bb2a014b5f3b3e488f9ca54f86fe0cdd7985f1"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x2, 0x40, 0x5a, [@generic={0x8b, 0x30, "d5439690f54e2e9184a8e558a799ddd8f3c628214121be3f1a1f405d319d9bda10289329ef922287f2e18ec18ee17612af4549178dd692192823c0def8c418f611ffa448334c7f02a2eb8f70eefc17a53e95471038507a730807df45862e8aca00df92b93c3633a78193bab4444e5a2461210e0138e00230ee3d0c8f7b4f52f23823b583efb5950570"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x3, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x25, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x2}]}}]}}, {{0x9, 0x4, 0xa3, 0x9, 0x4, 0xff, 0xff, 0xff, 0x5, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "a66769852d"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x4e3f, 0x7, 0x7, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x19, 0x0, 0x0, 0x8}, @country_functional={0x10, 0x24, 0x7, 0x9, 0x7fff, [0x0, 0x8001, 0x0, 0x8, 0x3]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}]}, @uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x81, 0x80, "01377f"}, @as_header={0x7, 0x24, 0x1, 0x38, 0x4, 0x1002}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x1, 0x4, "0c4175f212"}]}], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x8, 0x1f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xce4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xff, 0x4, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4a}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x7, 0x2, 0x6, [@generic={0xea, 0x30, "9f1b7a43bd3828bab2865f5b408cc42c1dffdf55663855ae91d8cd596c5b80ff201049e15ea59a96ba49b7ece59eab66e248f2c6aa1e5319d7bf1101dc47a738fadc3b8112db7c128757a77520d7fdf0c7d954ba1face380ac0c570e0da2553f4efe58c17794fd6091bccb6bc0860b7a027b9d0f6ee462711d5b68aa462be7c7d40603ec5d2a49a6a65c0ccc4df819868305dac858a5e4635bd9ac3a7bbced114a398d6ea434fa15828ee72ca8663b27817e9afe159c918a87b6537cfff4539f1a15253bed00a44277b5d1991b51a867b0e311cbb5970a8f70e87cc0967a7c9f905dcd9754e83cad"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x8, 0xff, 0x81, [@generic={0x71, 0x9, "167985a3cc3d845d5808b093e7fa51704e3938dcdb638f8a8c8deb1aecefd400db884c2a59302fbbd52cfafdf07f44a9d189c9cd14e5aa49c623483fb5cbb255bc0988f1763dac96f5921cc31f3714d6cdd2590916c35b20c807bb616378dd4b7631703902cb79b328f69f7ea0c976"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f, 0x2}]}}]}}, {{0x9, 0x4, 0xa7, 0x40, 0x8, 0xc8, 0xa7, 0xa0, 0x1f, [@generic={0xe9, 0xf, "73f8f651f03c9015c3b81d8baf7f817554c8e4d6a930a2db587f741679765aa77466c4a7337d84330f1d6dd3cbcef1d8f2bc00e9de689193d37560760cc8720c6367ec5871008af141c67869fd904e5178fb4cc22ad142d06b743aff3e0154f0bab64d3a72be99e53dfdf3682556b2f7ab0cc6924d13d1ca10e242964701fae3b9a298d3fa9619bf766b529e84a96ffe54bb1b452c3b0fcb14c4afde6706d1bf4dfeb9a063fe610362c36f325260da51d33f4eb4003cc471daa8a36bbafbe4bfb044a2227b77a09afaef58e96c2a93767699942fbde439cb76518182e3291f4ebfb1e9358caf14"}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '>'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x0, 0x9, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x8}, @acm={0x4, 0x24, 0x2, 0xa}, @dmm={0x7, 0x24, 0x14, 0x8, 0x6ba0}, @obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0x3, 0xb1, 0x40}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x0, 0x9, 0x4c}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x8, 0x3}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0xef, 0x8, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x9, 0x0, 0x6, [@generic={0x9b, 0x30, "206190858304bdc0c118a0abb2b19ffe4b48bca1697a36809ec4323d3fe81a57e3e0a0eb7ba8d9f5f159146def584c99591fb798a028f057dedbef8602b487f21226fb837e2caa7410568e1482ef01500b1e54864e269168fdc0a265e2b36a2fb8adfc141fcd7b65a5406a19b55d470ae94ceb3d82413a2008111d038499c67ee04f660f30d5230380302017b085591719104bd1326491ae8f"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x0, 0xb5, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xf070}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x1, 0x67, 0x7, [@generic={0x6d, 0x1, "74d51baa63203914bde2eafb0e8f071726338eab3c4524754f65e8f40bdc7cd6b2bf1389d486c77e13b8835e4c4a025d0567db39e36233658fa0c36b2b232f55ebb76c4bd09afd8027eb3d0b499ec2da1317c98a52cd34d8f22d47fd69abbb2b40636575eb62d710f7ab0f"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x2, 0x3f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7d, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x5}]}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x1f, 0x4, 0x94, 0xff, 0x5}, 0x5, &(0x7f0000000e40)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x812}}, {0xe5, &(0x7f0000000ec0)=@string={0xe5, 0x3, "a934b37692c2fd63da79659198a68477bb436ad37412b1f5da3449effb83b7dd3995dc23e68e76ba7cef6d371b1caab644240b430e43aa28f793a076c81d4a9ddc3e3bd35801bc0c4df815dfdd4c1a04a53f3f871e5f90a8c1f1902449f0a0cc0aaa424f10de703f3f2a7b8dca5f4effdda35d2998f051e8e4685ff9313f2ffe23278d8b0e8ac297aa5a98cc5e7004497dda50ff635ac950cb56e232d9d99b734ea6a59d09e16e1af37e6bb5fa562848642a98f4fe532bf1a0b8591383d3e118a2c55fe6a66a866628a5f64286e322a4051800a64fdb3195845ec30fb82e3cb57f6de7"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x409}}]})
syz_usb_control_io(r0, &(0x7f0000001480)={0x2c, &(0x7f0000001240)={0x0, 0x11, 0xc9, {0xc9, 0x22, "dcddd86292ae9838321f7afe0d555decc6a57a39c5c01c7e4e5c0052fa46e1244884fc9b8375d972846e5ab8ab4ac3795bccba1831c8389782e2b3d4f42f53023a99a3df8e015966dd28d2683d4ff59c2319ade25470e920a1399401e26eb88e2b7cb0bec5bb766eca7c63cdc15a3b4dba83a4f193dcab1ae8819ee85639ddef44dcd0e4fe4387f8ae550a214245f5f6a49b2a64d8df83603c8464f3fb8cbbf6791188c59108be1f41a21d31ccab263c1c2d8f0d6df1d3b7f8cccdf08072ef0964143fc336478e"}}, &(0x7f0000001100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f0000001340)={0x0, 0xf, 0xe6, {0x5, 0xf, 0xe6, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x0, 0xff0f, 0x2, [0xcf, 0xf, 0xf]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x20, 0x20, 0x5, 0x5}, @generic={0xbe, 0x10, 0xd, "ee3cd0ef35753d3407c3ce03035dbd74e0bffb3c69fbe5096ac7c0c937360ddc70ebcfcb17c85a2ebcbf325a0fb353f4164c46f6bda3027d2700689bff515391b00bda873d4aa985d59f4ea7d701b65ef7c549104ecd7e650df91b81db81c2cc0756c72d8f3e0ad681e744697d1fc2e85be4f59bbc7d4b1bc30229919cb2016e51818d710cd5a1c9e78ddd0d4b9530e091bd1ed964db4f0395536ec2596f1c1936c1b935c0ef4f04c16fd0e35e3880d2a27550d519fa7a4927fa9d"}]}}, &(0x7f0000001140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x39, 0x0, 0x5, 0x0, "c4c7e2ed", "ad46a02c"}}, &(0x7f0000001180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x8, 0x8e, 0x6, 0xfffb, 0x401}}}, &(0x7f0000001900)={0x84, &(0x7f00000014c0)={0x20, 0x1, 0x26, "9fee1effe48f06f155246269ef229cbbf7d8c2e2cc596e6270682d576ef82529038f00a8f684"}, &(0x7f0000001500)={0x0, 0xa, 0x1}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000015c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000001600)={0x20, 0x0, 0x8, {0x0, 0x80, [0x0]}}, &(0x7f0000001640)={0x40, 0x7, 0x2, 0x6a7c}, &(0x7f0000001680)={0x40, 0x9, 0x1, 0x80}, &(0x7f00000016c0)={0x40, 0xb, 0x2, "9416"}, &(0x7f0000001700)={0x40, 0xf, 0x2, 0xfff9}, &(0x7f0000001740)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001780)={0x40, 0x17, 0x6, @local}, &(0x7f00000017c0)={0x40, 0x19, 0x2, 'TK'}, &(0x7f0000001800)={0x40, 0x1a, 0x2}, &(0x7f0000001840)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001880)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f00000018c0)={0x40, 0x21, 0x1, 0xc}})
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:05 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000000)={0x16, 0x7, 0x2, {{0x9, '/dev/sr0\x00'}, 0x6}}, 0x16)
ftruncate(r2, 0xfffffffffffffff7)
close(r1)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:14:05 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000200))
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

[ 2671.734067] loop5: detected capacity change from 0 to 40
[ 2671.765292] loop6: detected capacity change from 0 to 40
[ 2671.766898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2671.770712] loop2: detected capacity change from 0 to 40
[ 2671.771468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2671.781779] tmpfs: Unknown parameter 'KÓ`8‰®Å$ñ»Ïä2WYìoݸï•';Sûlì!OŽ'
12:14:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0xf8, 0x2, 0x5, 0x0, 0x200, 0x40000, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x12820, 0x7, 0x9, 0x0, 0x2d0, 0x4, 0x4, 0x0, 0x10001, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x8)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:05 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x1, 0x13, 0x30, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x400, 0x4, 0x61a7, 0x3, 0xfff, 0x9, 0xef, 0x0, 0x7, 0x0, 0xfffffffffffff4f7}, r1, 0x0, r0, 0x1)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2671.972004] syz-executor.5: attempt to access beyond end of device
[ 2671.972004] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2671.973733] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2672.011942] syz-executor.2: attempt to access beyond end of device
[ 2672.011942] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2672.013589] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:14:05 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
ftruncate(r3, 0xfffffffffffffff7)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x38, 0x3, 0x1, 0x8c, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa48, 0x4, @perf_config_ext={0x9b1, 0x1}, 0xb284, 0x4, 0x2, 0x8, 0x9e13, 0x8, 0xee9, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x10)
close(r2)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

[ 2672.292885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2672.294709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
12:14:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:14:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:14:19 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
io_uring_enter(r2, 0x6c8b, 0xbfc0, 0x1, &(0x7f0000000000)={[0x4]}, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
ftruncate(r3, 0xfffffffffffffff7)
close(r1)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:14:19 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
fallocate(0xffffffffffffffff, 0x42, 0x80, 0x8)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
migrate_pages(0xffffffffffffffff, 0x2, &(0x7f0000000040)=0x9, &(0x7f0000000100))

12:14:19 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:19 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x20e1, 0x9bc0, 0x8, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:14:19 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="d9d3e872245704fe2aa65707000000000000000000000000007505379670dc9110748cd1ec8ca583f5d94bc244873ad06f7f175333977094d8f91fb2cf9f47de4728dc21b1d7bfe13b6ed823292e577747", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
[ 2686.311223] loop5: detected capacity change from 0 to 40
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x15)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000200)={0x1, 0x8a, "426edc0428e776a2649f78ce06f9a1df2a77422c26cb9179b07c7309bdb439ef1047373ad29dc4d61e1628864a9ccdcc075c009494cbfdc1ac90999464155e4b125933b37f70e1c120a324e96052382867bd6373c4fdbd58eb9a88ecac390ef1d4749ce364590d082273495a71dfcab6bf53e81ecfd66e3babdf7e5a1ee4b5be4c68a792d749c3538406"})
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2686.328436] loop2: detected capacity change from 0 to 40
[ 2686.381948] loop6: detected capacity change from 0 to 40
[ 2686.398052] syz-executor.2: attempt to access beyond end of device
[ 2686.398052] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2686.399044] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2686.411672] syz-executor.2: attempt to access beyond end of device
[ 2686.411672] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2686.412566] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2686.524545] syz-executor.5: attempt to access beyond end of device
[ 2686.524545] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2686.525471] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:14:32 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:14:32 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x7, @any, 0x8}, 0xe)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:14:32 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000200)=""/124, 0x7c}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000400)=""/24, 0x18}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/239, 0xef}], 0x7, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r0=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x2)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000800)=<r1=>0x0)
migrate_pages(r1, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x4010001)

12:14:32 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0x14524654, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
write$binfmt_elf64(r2, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x9, 0x8, 0x81, 0x8, 0x3, 0x3, 0xa0, 0xa4, 0x40, 0x2e0, 0x8, 0x9, 0x38, 0x1, 0x0, 0x4, 0xffff}, [{0x60000000, 0x3f, 0x6, 0x6, 0x8, 0x3, 0xfffffffffffffffc, 0x1}], "9df06d099bd24ec1071d72ae87f494fb8ae33a93c79d4fee86c86c1999519ff33031", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x79a)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000200))
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:14:32 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r1 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
ftruncate(r3, 0xfffffffffffffff7)
close(r2)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)
write$binfmt_aout(r0, &(0x7f0000000680)={{0x10b, 0x7f, 0x40, 0x3cb, 0x21f, 0x5, 0x354, 0x20}, "bffb59b36f0ae887057299b38916e3c69105884ca3b67da4e92e552c19a2fc7f97555958a9ac0ba1dc5d74dd760f0713e308828aa73de7e1b6c8dc7a73560e30112a24971b725b2b617ea2075178e9b4d0851d6972209fe05447d6f31f0c76792ccc7fc0a28bd9c8c0e0dfbc62eeb85ab11ae1bd23562b2800a354386bb124ee7efdd760d78a4223ea4a973e1438", ['\x00', '\x00']}, 0x2ae)

12:14:32 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x10, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2699.437819] loop6: detected capacity change from 0 to 40
[ 2699.467782] loop2: detected capacity change from 0 to 40
[ 2699.470883] loop5: detected capacity change from 0 to 40
[ 2699.541071] syz-executor.5: attempt to access beyond end of device
[ 2699.541071] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2699.542009] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2699.554774] syz-executor.5: attempt to access beyond end of device
[ 2699.554774] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2699.555677] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:14:32 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r3 = getpid()
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x3, 0x0, 0x3, 0x20, 0x0, 0x9, 0x4090, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x80, 0xff00, 0x5, 0x5, 0x1f, 0x81, 0x401, 0x0, 0x0, 0x0, 0x8}, r3, 0x9, 0xffffffffffffffff, 0x1)

12:14:32 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7, 0x2, 0x80, 0x3f, 0x0, 0xcdd, 0x19101, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x100, 0x0, 0x1, 0x5, 0x8, 0x51, 0x4, 0x0, 0x5, 0x0, 0x40}, 0x0, 0xffffffffffffffff, r0, 0xa)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:33 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[ 2699.659679] syz-executor.2: attempt to access beyond end of device
[ 2699.659679] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2699.660952] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:14:33 executing program 0:
r0 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r0, 0xe, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40080}, r0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2699.691910] loop5: detected capacity change from 0 to 40
12:14:33 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x3, 0x80, 0x0, 0x9, 0x9, 0x6, 0x0, 0x4000000000000, 0x817d8, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000200), 0x9}, 0x2102, 0x401, 0xd9, 0x5, 0xb4a2, 0x81, 0xdbda, 0x0, 0x8000, 0x0, 0x221})
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file1\x00'})
bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x2}, 0xe)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, r3, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:33 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040000000000000030af7000010000002000000000080000"], 0x2c, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000280)={0x2000})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r3, 0x0, 0x3)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000002c0)='system.posix_acl_access\x00', 0x0, r3)
openat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x92)
r4 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x7, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="06bf285e949abaf5649337f0faebdb46914c49d5a8dfd9986cb5794c00bab69614c0bf262aca349c57fe1a6e4e6a5d4a5bb33ac826fa0b3abb6d39736dcb588290152e7d1ab39faf7e1c7c7feaf36f3491eb261b1a56b4cb3c1aab1c6e068f9500498e8b5079889a50bb8f91bf05690df55828e25dc23a84fb5ed2b0e2feeaeb9e8ef25fca", 0x85, 0x2}, {&(0x7f0000000440)="865bd9f1e784bfff8cc39ec5512f0b33a603d83c4eb6a0c7429dd924606978e02c5f51383f5e07545714b237692c867e74d66518b96aa01de62f9e88e8b00078b6811e718266f98af211b3230f76ccda90dd09ec3e2eb41515cc8d99e7c4f47234c8a4af3993f2368da437f5c5d82eb4077644b198b9a4f8a2ad06723c", 0x7d, 0x100000}], 0x3008, &(0x7f0000000980)=ANY=[@ANYBLOB="646f74732c646f74732c6e6f646fd2a75ff36f636173652c6572726f72733d72656d6f756e742d726f2c666c7573682c6e6f646f74732c66736d616769633d3078303030303030303030303030303030382c706526726d69745f646972656374696f2c008d36a45ed30efb1e3d4641e90a28c17c42fe7ae07926d1edb3f55d4e865ea5751e6ff6e17580"])
execveat(r4, &(0x7f0000000500)='./file0\x00', &(0x7f0000000740)=[&(0x7f0000000640)='$$\x04\x00', &(0x7f0000000680)='\xb9\r.:/-:,!-/,\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000700)='system.posix_acl_access\x00'], &(0x7f0000000880)=[&(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f00000007c0)='[\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='[*&\x00'], 0xc14ddb4ac3513858)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:33 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a657f5a5c80f17b4de5d000000000057c8485d60ced3523ba3264f93930b00", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)=<r2=>0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xe9, 0x7f, 0x1, 0x20, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000200)}, 0xa210, 0x0, 0x6, 0x4, 0x5, 0x3, 0x9, 0x0, 0x1, 0x0, 0x1}, r2, 0x9, r0, 0x2)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000340)={0x8, 0x0, 0xcd, 0x7, 0x2, "1c1f0b1259590492346e6fc99d5eab437c3057"})
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0xffffffff, &(0x7f0000000180)=0x10005)

12:14:33 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2699.864838] loop4: detected capacity change from 0 to 4096
[ 2699.880490] loop2: detected capacity change from 0 to 40
[ 2699.917708] syz-executor.5: attempt to access beyond end of device
[ 2699.917708] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2699.918832] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2699.936088] syz-executor.2: attempt to access beyond end of device
[ 2699.936088] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2699.937082] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2699.949041] syz-executor.2: attempt to access beyond end of device
[ 2699.949041] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2699.949982] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2699.979059] tmpfs: Unknown parameter '[*&'
[ 2699.993720] loop4: detected capacity change from 0 to 4096
12:14:48 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:14:48 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a65700"/26, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:48 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700000000000000", @ANYBLOB="0e5b9198f2af71b64efc608256238d8e57d57f4b326d6612b7060a589acaf57cb9b88808d42b4598e24588836392402ac6894e3814f62d2b1d8c1f5d519f2189aa3f38068f2cb205617e6ffb43a5c1d97f5fed42ae99ee639037233445be37e6bab0439dc66cc90d4d541d610154c7569961496edc010ec386efda7e63b6bb9fc92c0000000000000000000000000000006eaa8f5cdf395bd082c33574ee47edcb519057a5586a280a96df5aaa7c76536f4dedfccc3005bb030086b032ee3ac2ae5e6e6196", @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
recvfrom$unix(r2, &(0x7f0000000200)=""/89, 0x59, 0x10002, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
syz_open_dev$tty20(0xc, 0x4, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:48 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x9, 0x3, 0x9, 0x1, 0x0, 0x7, 0x8000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x45002, 0x6000000000000000, 0x6, 0x3, 0xa9a, 0x6, 0xffff, 0x0, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0x8, r0, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:48 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x1, 0x0)
syz_io_uring_setup(0x7e58, &(0x7f0000000080)={0x0, 0x9733, 0x20, 0x2, 0x7c, 0x0, r0}, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000f2c000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140))
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r1 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000b46000/0x3000)=nil, 0x3000, 0x2000008, 0x11, r4, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
ftruncate(r3, 0xfffffffffffffff7)
close(r2)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:14:48 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x8, 0x0, 0x1, 0x7f, 0x0, 0xdf02, 0x406a8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x60, 0x1, @perf_config_ext={0x7ff, 0xb3a}, 0x42000, 0x6891, 0x3ff, 0x6, 0x6, 0x1, 0x7fff, 0x0, 0x2, 0x0, 0x8a}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:14:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2715.075042] loop6: detected capacity change from 0 to 40
[ 2715.141554] loop5: detected capacity change from 0 to 40
[ 2715.147830] loop2: detected capacity change from 0 to 40
12:14:48 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:48 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000003c0)={0x1, 0x3, 0x1000, 0x53, &(0x7f0000000280)="c068c059c41e93b1eaed8d3b18304a76e9abe7b92a8ddec2138fee5d25216ed30ed3fec61f7f0e0c276ec830b6375929cd0df23111c1b82a66548b2c31f14f448eea5505c778988980c0387f0686a2b3a341b1", 0xb2, 0x0, &(0x7f0000000300)="ab1af35717e5a55f8bc9888f7a0b9be8c1d77cabe9547e592a462937e46c05662ab28bc893481ab784f4fb9332957293597b858fb754e845ee7b424ab1fd447a0fe168ff97cb9a6321b99764f6c39c2b00ff8b1ffb83ce32d0029708d518308995f1ba2987f58e3b33b2da7ce1bda298adfe70a23c815970345a811f8c9bdc21deca67eb47a8fee887ea56b549ad2038fab6a420c1f1115564cc3f371903a841a56c43caaef17987cd14ee7f1faa821d3c08"})
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:48 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0xf8, &(0x7f0000000100)=0x4)

12:14:48 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="0418000000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2715.417266] syz-executor.2: attempt to access beyond end of device
[ 2715.417266] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2715.419931] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2715.422766] syz-executor.5: attempt to access beyond end of device
[ 2715.422766] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2715.427037] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:14:48 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="04000000000000001000020000000000200000f00000002fae"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x0, 0xa0, 0x5, 0x2, 0x0, 0x2, 0x4c080, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x40004, 0x22, 0x0, 0x6, 0xac, 0x400, 0x8000, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x9}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
r2 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r2, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r2, 0xe, 0xffffffffffffffff, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x400, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x4e, 0x81, 0x20, 0x0, 0x5, 0x101008, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000200)}, 0x1, 0xdd, 0x80, 0x8, 0x2, 0x6, 0x101, 0x0, 0x6, 0x0, 0x5}, r2, 0xc, r3, 0x9)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x3)

12:14:48 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_io_uring_setup(0x2fba, &(0x7f0000000400)={0x0, 0xdb51, 0x8, 0x3, 0x75, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480)=<r2=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r2, 0x0, 0x0, 0x100)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r0, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x9)
r4 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r6, 0x0, 0x0, 0x87ffffc)
ftruncate(r6, 0xfffffffffffffff7)
close(r5)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:14:48 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x9, 0xfe, 0x7f, 0x0, 0x6, 0x14c14, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x1000, 0x20}, 0x8405, 0x3, 0x3, 0x1, 0x3f0, 0x4000000, 0x89, 0x0, 0x401, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x8, 0x9, 0x5, 0x8, 0x0, 0x8, 0x35944, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x12a, 0x9, 0xfffffffc, 0x0, 0x7ff, 0x1, 0x3f, 0x0, 0xffffff0a, 0x0, 0x5}, 0x0, 0xf, r1, 0x1)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:14:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:15:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:15:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:15:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2731.873534] loop2: detected capacity change from 0 to 40
12:15:05 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a65707000000000000000000000000007737cb1b2e67dd9b78a22bdc4a8f", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:05 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ftruncate(r2, 0xfffffffffffffff7)
close(r1)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:crack_exec_t:s0\x00', 0x22, 0x1)

12:15:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0xfa55, 0x4)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x3)

12:15:05 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x402a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2731.887533] loop5: detected capacity change from 0 to 40
12:15:05 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="d9fa3120ad92b08200002ea5492239ba240f89a6570700ffe4000000000000000000003845c8d41420c491fae160f386dfedc6e270688cd7a0526bc161abab3dc4e4dbe47a60690bed34900598625e02896e8867ec60f54b3f3f3970ddb55d05000000632edef47724be6302ff597be3c34e19027d4fac462cea5675c539c9169194499f497da41125e5aa7652802ede835d12cbed4ae47579e6b888ebad3c57ad154e0d193d1b7e594249", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x101080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0xa1ab}}, './file1\x00'})
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2731.930755] loop6: detected capacity change from 0 to 40
[ 2731.981524] syz-executor.5: attempt to access beyond end of device
[ 2731.981524] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2731.982460] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2731.999721] syz-executor.5: attempt to access beyond end of device
[ 2731.999721] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2732.000710] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2732.005574] syz-executor.2: attempt to access beyond end of device
[ 2732.005574] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2732.006546] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:15:05 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000200), 0x1000, 0x10040)
r2 = syz_mount_image$nfs4(&(0x7f0000000280), &(0x7f00000002c0)='./file1\x00', 0xffffffffffffffc1, 0x1, &(0x7f0000000300)=[{&(0x7f00000015c0)="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", 0x1000, 0x5}], 0x4000, &(0x7f0000000340)={[{'system.posix_acl_access\x00'}, {'system.posix_acl_access\x00'}, {'system.posix_acl_access\x00'}, {'system.posix_acl_access\x00'}, {}], [{@obj_user={'obj_user', 0x3d, 'system.posix_acl_access\x00'}}]})
fcntl$dupfd(r1, 0x406, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r3, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2732.085724] loop7: detected capacity change from 0 to 264192
[ 2732.087056] nfs4: Unknown parameter 'system.posix_acl_access'
12:15:05 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3)
r1 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r1, 0x0, 0x3)
write(r1, &(0x7f00000001c0)="a5304b584f841159d2ebf571da8c225f99e46c2a7c741c7d1a39a613439a6b074494e96fd0db3a098c912dfd58c6849d1ebcd2cbf6260ca2cb937ad56ccb5a332bd94feb15dc2fe1870a18b69e00ed363b559da88c460c0e758e38ef9612955cf2107f6d41b49ff974d6137ec083c110c87140cebbd022b29181f811207341305febf1ed2f53d23aecd70d6a0d373d40500790df9846170b8771d7b8857f7a5641503e1bef479b358ac4e665a1d8dc34cfc713446083830b01a95f907cbf1f6e095021eb0fbd3973720065ff06e28c82580a5e6582717ae854", 0xd9)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x23, &(0x7f0000000180)=0x10001)

[ 2732.144472] loop7: detected capacity change from 0 to 264192
[ 2732.145824] nfs4: Unknown parameter 'system.posix_acl_access'
[ 2732.215191] audit: type=1400 audit(1668255305.621:12): avc:  denied  { relabelto } for  pid=12769 comm="syz-executor.1" name="SCO" dev="sockfs" ino=49752 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:crack_exec_t:s0 tclass=bluetooth_socket permissive=1
12:15:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x2, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0xc)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x2)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r4, 0x0, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000340))
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
r5 = perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x8200, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280)="9611bae8", 0x4, r5}, 0x68)
r6 = dup3(r4, r3, 0x0)
openat(r6, &(0x7f00000005c0)='./file0\x00', 0x200, 0x184)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x184800)
r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'})

12:15:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:15:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:15:05 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x1f, 0x40, 0x1, 0x0, 0x3, 0x7}, 0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
syz_io_uring_complete(0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="04000001000000001000020000000000200000000000000023085571ea8d0f792700172ee0891316eb5a708af891517e32989d239ded913750fbab1bb74e2303bf03731211a6aed2ee7d17283c82"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2732.356969] loop5: detected capacity change from 0 to 40
12:15:05 executing program 1:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r1 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000009c0)={0x0, <r3=>0x0, "3aa56e6dc4769754549fc89fdf97d42a05a1f9141ff2258062a4327514a1df568db286d810fcf1a737b2f78c8a8b0968775b1047f9fc3727e2e54f7a702b968169cac3e0b952abea942dd989239350dff0bccc703bd4f84a540cd28255563061f5c28baef9bd885281c610a605eb2bbb2213cbcbfd0cc46b31d0021f4bfc0cd5ddae2228e7bfa1f60e51955a56be07b47ba676b4101d8de1abe9761d6bc3ccbc11eacbc08a55fe844fed1c8a79db8c9e69d730e5f7fa0e364f8c67d1e6ca6be02686d0f629bd62579cbf3b29907efc981b72cdc4b504be6dbfca7c501eac7489c59ea104915f69d9d4015876e883f1f34b10a8c1f73500c60b9e8de55883d88b", "edbfd0ad854bc3457d019265c29d1faadd7d5f0b56fc4e7832a5443d04e809dffb0248529a207a55615bc55d453ed665e23652f4d958a05a405cf29c9b96ea499a1f776bc9c7ade7cac4ef9cdc8990fc4923d037e1706ea6c795ae8ef960adb60260abaa5420cfaf416b91e10b4b3aecb4e933d6f1f07b9e45ffa2bfa7826e0f77d0f57ee9e09e0c394df8ea0aa1b1721eff79a1665b053710d980010e80a2c109d7682aac5193e2e5636b42c5cc650510d8114d8aa584f4b62212c7a4a1076a24df3d91a097d65f2c92e78d36531891b532c30e83d5ab9858e3b981c85524182d01a113eafc07f6c035437182eea61b307e635e05eb6634567aa3ab39ab3e833cdcf128f2d9450f03e7d4d0626491d38a367777a52931820f20ca1017d3bd47aa9ca6220c4ba6696702812f8ad1fc6cd603fd1774af3f5d295ca501aef4e11c35487fb44fddaf73acf5eaca24453503241f5e7c9e36de262d038476d681f7fdc0bfba248b80380e865e6ad9939b59c1d5f5862c0cf95245c3e34be86ebed112fdb0dadb0ea4e70729d1080b370393b60874071c61ce2f187c65e47a53d464912c71ab643593358e5aa42a60f1ca4d12fcded0b27eb82415383c94cc37885813ffcd6163cf50b62bfaa24dcde9b76cd26730a3a9c3719af5ab289ebc6ae476417974d3ba1cd46b05ef16ea6dfd6fcbd9284a8e83bed47225628402ff836cba67a6867de8aef307f1ad3207411411db247b37ea28777e4116f6cd53b5f6e93487fd4798cf1464645a128d1c622c89a081fcaf5a13e2d7c7f68714760bf5297301fe366cd6eb7508b545ac4e984dbf9da3146b4946c0ee6a95cb2fce75cb2e0d23c3f5cce3c8617b5c28c0684714f52cd57b20ca1120d9f96ab3ca9b6ec29d7b55c41e47214c874eb4a0884190274524b3494fa5b433aeff27641c6ea4a1224d2dd680dfd1e30fb6fadc6b02c003e4d0aeb4fca88cd4a43afc24093324c09e814f73a78825d34e676680ca1d9f1872750cfc33a352534aeffc2b9d61f55058c6e3a25caf8c89617dd342a312a85e1b579540f3153a15210b7bdf7017f9ed9f30d5b190743bd552b75888cec7c7cce872ca40b7d3078d33e8be13bffaabe21b7b0003b9c88bbf4dde6da8de5a89080f7aeabac0561ba5c0fdbd3dcc0fe5b850a2cd839ec34510e9cd882ccb86f9fa9c44a37f619472c152a95f30e95887438c43da7f06933b1f05fd6e7da0ff30da5c0298593a6d710df9e38a7cf2d17f1ad13dd7722143d75cc743606d35f92540be095158c135bcd18be57810468af085086259fcc804f491e321ab1c4ee692ead725724d34fc7d07c235e3fd61e1d942fbe1916d6f20330c0cb3c05a8ee2c6bf1a605645f9d3951e25932b4acbb38c5de98572bcd60fb1f73a5218cd33a999f8e30ecf57aa79115bb979fa39261d667dc2ad8306eb574bcd4bb0662009d009c43ab12db38143f3f3f967f0951c9bff5024fb7298a11ba258435ee360618ce3634feee331a7628bfc5a428a96479ac56e7f50f45e8e7a73f010c6ecd328390c558429ca171121821a830e300c2ecb0966b403ea2afc494266c9435792382b6d991fb1be116a2e0aba611cf43bd055f6190ee4ffe0f20a82d67254f6189955fd08bb523a87cc3525ae23becb75e341ef4fb4bf0788c5982032d9412b255fded8af22ac76c4450fc5e2fc79ecdbebc4b2c1f7fae8671917c5df831e5ea466a8f5cf6fd05db13881410d0577678af6fda5633a6f25748d1a1f1c6dda34b48b5cdad2819dcfc2628a4360f662b6353bd74bbb4511e54f377b5d2011b456653be6214b4d716280af772bef0748d46f532d91a7458a25d43ca616415b60e8bab2bcb372c531f8a53bf36eed473f8981c256dc3c2a32903fe034ecec7a2d842ea9f0f8e0c51490e874c88f95fc8ca55ceb2127ac8559da5b8c4cf6d4d1db97ffd4f697f2d87f43a1fd04d7754e8856168ce40e88141fb477d9f5ee5799cec4d2965a5e0594f89ebf360daf42d42f92c2277e0e4eaa88d5d84a12450f7cacea96fbdd3b8b93583f691c385972db3972147de62165f3fc2c7c58802ecbe06af68cda1b9e0ec38f5423d58b24bfc20e9a5175e5c3c70c46427ef50fde085066e49c841c3e636d8cc8e7a949ebab02e5eb7a3f7be2e334db9998c7561c2782a27e051bcec122e0b75e194cb5831f56f5b2b84714291c2ddedfd2a0e38438a3c8a363521aedac089bcf1ea8d2c53cd587aab36d3f199cf738edceb4edeba940600dbd2a5b4fc04bf98a3bb9f28fa5667467ab4c0f6dbb8e491b7b3fbf95db4563acaf2df4e5625eb20d5c9f7f40f03bc170b49ad346bcee4a17e4bca05c1ad431e8b8a36f475d77f7505bda65f2489a23650b6d5bc8dd5589572c39aafec008c003bbfc34d3927775a0e7facd2cc81eacb818610543f08e7d823cb25f9e23b633cbab40ea804116b10d96ab623b8fe7d5a5c7e2d035adf3c36f462e57629613b82633a772ee7e1946ce0fb31abd01c61bdbc8dd736bf22375148e7fca7bc5ed2d0b4a59182b048faaa0dea78d3918a06f7d69c9ce90b91dc81f78301194073db49918613de398ed8a901753e2f089af0a539960f77e271c2d105c39c8ee3217093b351048119b39c7fb5059f84de10bf7954995751695d13049c2b71712a15abddaa2916d5bbb2df0c9caf36baf9d231ad200ddbf9c2bec83874a03b6c19c50237c23704d460cede6f053d82b8ea45a5eb2ab0e80ac719008373190c6526c761f520efb663c8ef2e671ccf4c93ffb4cae1deedc23e059ec52d12d34f1a1fea4b5ac8d0ef9f71b6fd21f804089d5ecab0c4a578f4e739460cb29e78c9abad45eaca73b2140d6c9a69183a653dd9a36c6a67b4db2b5c09907ef1f1822f92939adb1b2d7a519fefe4b63de31c6d83d57fe5f4288317a7d1e01bb27f85fd5591a8297fc588568dd534971ecf50455d05715d8050efe2504f0df3008852731eb40f094a6d8b59e5bebb4e414b9a62473f01802847ab1f22b4577d35fc3a6761fd0838afcb1175797f74c304995783b3668960c7621b7bb8a88990cc26aad77a45265c67e251aca6ba5c6bca12f1cc8f29623fbd7ea638aea3e44dbb5a540c3d4ce05681bdd075d40f86a1a43f1231f6cb9e1ddca9e1e6921cad70d62b08c8aa5855ef95e4be3c2853e0cfaae70ad74e1ddbf156a466154b6e66687b6dc219da4a91e94c4edc7d6abea8cb127044c7ee255f8c3b71597ea1d2c52febebd50529ea3f7c96177818648380fa8d71ae54ec247e666c913dce8098d7cce9f919064fbf38aca0a8273b1bc93d00f52d35b9a6540ef285ede29ba16d017b8b71a4d66ece40f3b0cad81eca41e37ad40bc9fe533b15ccb5c844b21917f61c872938422ea611e234cdd92dcf7bbf017b10651e08ebf3f00f3c680a710b4c06ca87aa70c42741d3024d75e9b5378122a24164c9d01545db960de1c99f287d2d719daf80bfa0aa05e31e83274252405402b0f9d8ea5e0c69bb1b0521ef31228b3ddfb0836c1c676bb805c0c79244ebba0d7551c3c27c8a030fa3b0a80ed72c19444b1266e1032013c39db94a761a3cc56da8f07af41ff07d13fd36e74473bf2c4e3b7cb9eeb59744ad2b37bd3781012c3cab387904deb5114b73e9a62e0358ae0d50b0b874d66fd92f4d70dd404795f9b4fdf1b6551a700d4229ad0e7461d5ffaf6de6d166fc4ed9764801eff84bc629a5f0bf8e79cb28b8a88be624286ab0e57c662b6c91fe1630ea3019e4a1fdde23ff9396cc179e9c160ac7d5810fbf877171011dbaafb11563b58792f5dfb5925ac61acd07763574d233f22fd628b33a81aaf4b4737def2e80391157d7885a66ce790c0ff6cfc130c24d9e2db5eba9cf76404d285bc5e286ac24cc907ea153f42724955363f9e58d2eddd37179701be5b7e0a85cdc18e8d8f1e5515067525b42f63c361791905332ed8269c657fe5a67f82fb1b53dc7e476823ae4731af6cb25636b607d73757cd363ee9f01d9d9d4f1d7474563d2c15abe4b05f9b0120a0ec303950827fed640c7c68d9552cc3ba6a011677707dc00e703bc5c2e9707bd1d2ce86fe435d506b6788a5acfb6a3c2bd6ba2057af5d968a937bec020a44ab7b9654e571acb1781105482c227feaa8d89bac81d18a9d68b504b3cce21f2f14a4cb07c9eb6bab41ebea39b5198133452d1312ddc6af13bc5c739259d0c10fa180c2e0e8d74f317ae93bbe4588dd360ff7e66fdf7b15e2e9cd1a3759016cbfd31aaab4a86a55b3137c9d295e89cc70189ed5acebecf06278b4bc88f7c53cd36b0f13e87f945723cf15ec47effd72aef9fdf88b493ebc6c7423a5925fc159108ba3eae6ab9199aaf8bd44e219d4016524c294663331bf3d98fece89b79af66a41ec59eff5ca919265f5b6dcdfec6a1bee93628074ea77f1901f6549b5436efc8e6787c1dca57f20bfc016417b99315db8b7c497b13dc9e249a9dfb25a5827cee24c3d9a84d3de3fab81dca8332b9c6c24e005762af17c33fedf0f983c042f54ee213737fb61ecefef0fb5d9d566b306753103c5fea858821b05d8819d363781b7018fad71e8be96af6ee7fe1b173303964d8e19a74b8d19505b4c496147272856edda256918e7d75bd28e7be3d75a7cbacb91c2c4ba4600ae24d3d981d7b82a6c71c4810e98bd68c6d001dfc81ac29e5e9eb82e98cbdb8e02c1fdefd8057beb339f6ae01c093d28688830c96b419db7ca289a4feb7e1656092127072fe2dbeb7a640507af8967fedcf1d1bc66efb18d6b0047d7fa7a985221f384d432f4f2e040a3c2c544d66490f6c34d3e6f51a9ede234e609bdf7f95c9e06283af0c2cae0c96a0dfa4eb915013a16e01d9c4b76c56c326ab20fdb110b5556668c08ce2cbd0d11113fc7ad7069980b5b77729131f20e58234dae6bdeacfe5f4a7b9cbfd62ed8480089c34205a9ed838e7d2e99a074ac8ebcb0052046552143ead400265cde7e2ca1748b53fc052b55a4796be031cf00f1995bf7f3b64f8c60865a5d03066e2186d35bad306687eb995e89f2030afd577f83a248bdab79c439635aaf892a631f217fa106e8fc56783d7f4378b53c8ae3190f495b31eb27f582bf89cbd80170d275dd43b940312ad2a74a8590fc53f48a5011f0f4a0ebe0b29879c981a2c21d9d7fe9c66b519d67670d3a74d2a5a2ecdd392f0b040042d9b49c56ad00c8613491cd1b929b56a2f219e3e9410ef227efa25ed1412c0df6adff099f97b792b5b8b1c5225f7ca16d77000b33457972e91b506f9285293e9e0189fe5410bbe08ebf5a961afff32e8b9e6c15a1c514cd1d8ee59ddfb2c78d244f52cc36e8d6566883c1ea294184e460f1d7fdeb1dff9d9381bf84a3cb650787fae43aeee07d9b351ff0372994bde3"})
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000019c0)={{r3, 0x1, 0x500, 0x4, 0xe605, 0x9, 0x7, 0x9, 0x4, 0x1, 0x0, 0x4, 0x3, 0x8, 0x9}})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r5, 0x0, 0x0, 0x87ffffc)
ftruncate(r5, 0xfffffffffffffff7)
close(r4)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

[ 2732.451621] loop2: detected capacity change from 0 to 40
12:15:05 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000004000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2732.548275] syz-executor.5: attempt to access beyond end of device
[ 2732.548275] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2732.550298] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2732.569635] syz-executor.5: attempt to access beyond end of device
[ 2732.569635] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2732.571546] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2732.729633] syz-executor.2: attempt to access beyond end of device
[ 2732.729633] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2732.734072] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:15:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

[ 2746.891675] loop6: detected capacity change from 0 to 40
[ 2746.898862] loop2: detected capacity change from 0 to 40
12:15:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:15:20 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa0000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x8802, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:20 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:20 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d2d3e8a59d160acbfa240f0000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
openat(r1, &(0x7f0000000200)='./file0\x00', 0x105080, 0x1f)

12:15:20 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r0 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ftruncate(r2, 0xfffffffffffffff7)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file1\x00'})
close(r1)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

12:15:20 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000280)=""/241)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x38080, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r4, 0x0, 0x3)
dup2(r3, r4)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r2, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2746.967813] loop5: detected capacity change from 0 to 40
[ 2747.051033] syz-executor.5: attempt to access beyond end of device
[ 2747.051033] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2747.052085] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2747.054452] syz-executor.5: attempt to access beyond end of device
[ 2747.054452] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2747.055835] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2747.083990] syz-executor.2: attempt to access beyond end of device
[ 2747.083990] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2747.084968] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:15:20 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
fcntl$dupfd(r2, 0x406, r0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9c33f43b0ee9c8238e7ca6f5890e8a59de6160a", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
r3 = accept4$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f00000015c0)={0x0, 0x1})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000002c0)={0x0, @empty, @remote}, &(0x7f0000000300)=0xc)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000480)=0x80, 0x80800)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x40, 0x40, 0x12, 0x0, 0x2, 0x8600, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xb3fe, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x5}, 0x500, 0xffff, 0x76bef47d, 0x6, 0x1, 0x1, 0x4, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa)

12:15:20 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x5, 0x0, 0x800, 0x4, '\x00\x00 \x00'})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040))
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:15:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

[ 2747.239098] loop5: detected capacity change from 0 to 40
12:15:20 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x4, 0x0, 0x0, 0x17, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:20 executing program 3:
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000001c0)=0x1)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file1\x00'})
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0xf0, 0x0, 0x1, 0x0, 0x100, 0x80048, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x6, 0x4}, 0x40902, 0x9, 0x58, 0x2, 0x0, 0x9, 0x4, 0x0, 0x14, 0x0, 0x100000001}, 0xffffffffffffffff, 0x2, r1, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2747.321871] loop2: detected capacity change from 0 to 40
[ 2747.350908] syz-executor.5: attempt to access beyond end of device
[ 2747.350908] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2747.351946] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:15:20 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r2, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r2, 0xe, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x81, 0x0, 0x3f, 0x1, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000200), 0xc}, 0x60, 0x9, 0x5, 0x8, 0xffff, 0x2, 0x9, 0x0, 0x9, 0x0, 0x5}, r2, 0x8, r0, 0x8)
rt_sigaction(0x33, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000c00))
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:20 executing program 0:
write$P9_RCREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x73, 0x1, {{0x20, 0x0, 0x6}, 0x9}}, 0x18)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10501, 0x0)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r2, r0], 0x2)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0xfffe, 0x0, 0x0, "2fb321ff070b0008"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="15ffffffffa0f5aa05000000000000000000", @ANYRES32=0x0, @ANYBLOB="04002a00"], 0x20}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="95fc000000d052e1287e4dc9ee604f4d2838db8bf14551f104eb3ccf890e8550c70ff9a075d7d2b782744e300c7517a44a4514459b54e4ad3d68e0e3aaac7221377a3b4a5637b11284b1843a0c90f0bacf568ee8137acd8833d48a645dda1331a178948726e589ab9387f29783b13af68268cdedada3f2ea5f59036c5cd34818e9e4204da22d6d6bbfed01196bfaa3a63dd778a8526311d16e6822ad935c950624f5c8e243bb51e482762c72cd6eec4cbc9a4cfd84e9848b8a21283ed0fcafc8976e055bf83fabe4ff0c6d0b19", @ANYRES16=r4, @ANYBLOB="04bb3175002dbd7000fedbdf2521000092b0", @ANYRES32=0x0, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x4801)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2747.501034] syz-executor.2: attempt to access beyond end of device
[ 2747.501034] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2747.502034] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2760.018208] loop2: detected capacity change from 0 to 40
12:15:33 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x0, 0x8, 0x9, 0x0, 0x0, 0x20000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbd4, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x1a340, 0x3, 0x101, 0x7, 0x0, 0x404d, 0x3, 0x0, 0x9, 0x0, 0x5}, r0, 0xc, r1, 0x9)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:33 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="17ff0a17010016002d10c0d030a8d326c60068020002000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x4, 0x2, 0x3, 0x7, 0x0, 0x6d, 0x4000, 0xf, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000200), 0x5}, 0xa000, 0x4, 0x8, 0x1, 0x4de5, 0xaa, 0x6, 0x0, 0x0, 0x0, 0x13}, 0xffffffffffffffff, 0xb, r2, 0x8)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:33 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:15:33 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
r1 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r1, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r1, 0xe, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x8c, 0x7}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x313, 0x0, 0x30000000000}, r1, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:33 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:15:33 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:15:33 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:33 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffef, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fstat(r1, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [{0x8, 0x6, r2}, {0x8, 0x7, r2}, {0x8, 0x3}, {0x8, 0x5}, {0x8, 0x4}], {0x10, 0x4}}, 0x4c, 0x3)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000007f80)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=r2, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b#N\x00', @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08010000", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="10000200000000002000000000000000"], 0x74, 0x0)
syz_io_uring_setup(0x6910, &(0x7f0000000080)={0x0, 0xfb85, 0x20, 0x0, 0x1d2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r3 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r5, 0x0, 0x0, 0x87ffffc)
ftruncate(r5, 0xfffffffffffffff7)
close(r4)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)

[ 2760.059764] loop5: detected capacity change from 0 to 40
[ 2760.092167] loop6: detected capacity change from 0 to 40
12:15:33 executing program 0:
r0 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil)
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
acct(&(0x7f0000000280)='./file0\x00')
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x6000)
shmat(r0, &(0x7f0000ff3000/0x3000)=nil, 0x4000)
ioctl$CDROM_DEBUG(0xffffffffffffffff, 0x5330, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x691, 0x0, @perf_bp={0x0}, 0x408d, 0xfffffffffffffffe, 0x4, 0xa, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
munmap(&(0x7f0000fec000/0x14000)=nil, 0x14000)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000040)=0x7)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2760.209985] syz-executor.2: attempt to access beyond end of device
[ 2760.209985] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2760.212149] Buffer I/O error on dev loop2, logical block 10, lost async page write
12:15:33 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:15:33 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
io_uring_enter(r2, 0x6e9f, 0x3a47, 0x0, &(0x7f00000002c0)={[0xa4d]}, 0x8)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000200), &(0x7f0000000280)={'U+', 0xffffffffffffffff}, 0x16, 0x1)

[ 2760.262697] syz-executor.5: attempt to access beyond end of device
[ 2760.262697] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2760.264916] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2760.313668] Process accounting resumed
[ 2760.317139] loop6: detected capacity change from 0 to 40
12:15:33 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r2, 0x0, r3)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff, 0x4})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r1, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)

12:15:33 executing program 1:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=<r1=>0x0)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1, 0x0, 0x4, 0x0, 0x0, 0x400, 0x8000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x4, @perf_config_ext={0x2bd6dd7, 0x800}, 0x400, 0x3, 0x40, 0x9, 0x3f, 0x2, 0x0, 0x0, 0x1, 0x0, 0x8000}, r1, 0x2, 0xffffffffffffffff, 0x8)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
r2 = syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x23d5, 0x0, 0x3, 0x316}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000580))
r3 = getpid()
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x9, 0x3, 0xff, 0x0, 0x7, 0x100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x6, @perf_config_ext={0x9, 0x8000}, 0x4000, 0xe57, 0x9, 0x8, 0x6, 0x7be1f3e5, 0x8, 0x0, 0x5}, r3, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x5, 0xa2, 0xed, 0x0, 0x1, 0x140c0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x5}, r3, 0xe, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, r3, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000000))
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r5, 0x0, 0x0, 0x87ffffc)
ftruncate(r5, 0xfffffffffffffff7)
close(r4)
syz_io_uring_setup(0x4348, &(0x7f00000003c0)={0x0, 0x13d7, 0x1, 0x0, 0x18, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440), 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

12:15:33 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000014c0)={<r1=>0x0, <r2=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000065c0)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/5, 0x5}, {&(0x7f0000000500)=""/127, 0x7f}, {&(0x7f0000000580)=""/186, 0xba}, {&(0x7f0000000640)=""/147, 0x93}], 0x8, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [<r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000d80)=[{&(0x7f00000008c0)=""/141, 0x8d}, {&(0x7f0000000980)=""/230, 0xe6}, {&(0x7f0000000a80)=""/75, 0x4b}, {&(0x7f0000000b00)=""/33, 0x21}, {&(0x7f0000000b40)=""/111, 0x6f}, {&(0x7f0000000bc0)=""/233, 0xe9}, {&(0x7f0000000cc0)=""/19, 0x13}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/101, 0x65}], 0xa, &(0x7f00000068c0)=ANY=[@ANYBLOB="1c000000000000000000000000000000fe39ae08117cbc8fa5684d08ddeeea8cfd2d640f380976a7e7c5c2ebb0bac870fd7191162b387584ffbb8d2226eb909549b8b4e3e876af165cc2bcfb8b435a9797f2d423cfac671021f276c35f169f79666690", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000140000000000000000000000000000003b6b71f9e2f93db91d4794f93d8d0dca206d1b289706f3cffd2956453d9dd7b86631e7d30b05b62a6f2664c5cce168eb9087c3f0a750b822319320cd46ad40b78ac0e1a39481e49f593af83d2a17c764d3db828cc61ff313a67b4fa6c8084be30bc243476e3c27cb94cb8cfe4568645987284a95113105477fcace2d3ae826df164a48538cc619d301f018218848e8fc1188b0a327cf142fe55fee966f01e056d74cb42f72ccfc13608e868faf83b0799d0684e6802e4d5cfd5a1786e83f2642165c89412779a475589680e6bb9c62137f", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=<r4=>0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0}}, {{&(0x7f0000000f00), 0x6e, &(0x7f0000001240)=[{&(0x7f0000000f80)=""/224, 0xe0}, {&(0x7f0000001080)=""/116, 0x74}, {&(0x7f0000001100)=""/178, 0xb2}], 0x3}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001280)=""/89, 0x59}, {&(0x7f0000001300)=""/244, 0xf4}, {&(0x7f0000001400)=""/43, 0x2b}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x4}}], 0x4, 0x40000020, &(0x7f0000001500)={r1, r2+10000000})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2, 0x40, 0x62, 0x4, 0x0, 0x1, 0x1800, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7dc, 0x1, @perf_bp={&(0x7f0000000200), 0x8}, 0x281, 0x1, 0x3, 0x7, 0x7fffffff, 0x80000000, 0x5, 0x0, 0x10000, 0x0, 0x8}, r4, 0x8, r5, 0x3)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r6, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat(r3, &(0x7f0000000e40)='./file1\x00', 0x101200, 0x2)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:33 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

[ 2760.390378] Process accounting resumed
12:15:33 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0xd2040, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r3, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {<r4=>r3}}, './file1\x00'})
setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:33 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

[ 2760.490444] loop5: detected capacity change from 0 to 40
[ 2760.521525] loop6: detected capacity change from 0 to 40
12:15:33 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc6, 0x0, 0x0, 0x7, 0x0, 0x10000, 0x40072, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3a2}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
recvmmsg$unix(r0, &(0x7f0000002e00)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f00000001c0)}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/7, 0x7}, {&(0x7f0000001440)=""/198, 0xc6}, {&(0x7f00000015c0)=""/176, 0xb0}], 0x6, &(0x7f0000001540)}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001780)=""/235, 0xeb}, {&(0x7f0000001880)=""/247, 0xf7}, {&(0x7f0000001980)=""/19, 0x13}, {&(0x7f00000019c0)=""/172, 0xac}, {&(0x7f0000001a80)=""/11, 0xb}, {&(0x7f0000001ac0)=""/204, 0xcc}, {&(0x7f0000001bc0)=""/167, 0xa7}, {&(0x7f0000001c80)=""/245, 0xf5}, {&(0x7f0000001d80)}], 0x9, &(0x7f0000001e80)}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001ec0)=""/8, 0x8}], 0x1, &(0x7f0000001f40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)=""/15, 0xf}], 0x1, &(0x7f0000002080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000002180), 0x6e, &(0x7f0000002240)=[{&(0x7f0000002200)=""/17, 0x11}], 0x1, &(0x7f0000002280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x140}}, {{&(0x7f00000023c0)=@abs, 0x6e, &(0x7f0000002780)=[{&(0x7f0000002440)=""/125, 0x7d}, {&(0x7f00000024c0)=""/250, 0xfa}, {&(0x7f00000025c0)=""/174, 0xae}, {&(0x7f0000002680)=""/213, 0xd5}], 0x4, &(0x7f00000027c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f00000028c0), 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002940)=""/11, 0xb}, {&(0x7f0000002980)=""/75, 0x4b}, {&(0x7f0000002a00)=""/60, 0x3c}, {&(0x7f0000002a40)=""/201, 0xc9}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/188, 0xbc}, {&(0x7f0000002c80)=""/151, 0x97}], 0x7, &(0x7f0000002dc0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}], 0x40}}], 0x7, 0x40000160, &(0x7f0000002fc0)={0x77359400})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
r5 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r5, 0x0, 0x3)
fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x4, r4}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
r6 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r6, 0x0, 0x3)
ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000001540)={r6})
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x9, 0x7, 0x7, 0xff, 0x0, 0x4, 0x10, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x1, 0x1, 0xf9cf, 0x2, 0x10001, 0x7, 0x2, 0x0, 0x6, 0x0, 0x10000}, r2, 0xa, r3, 0x1)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)
ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x9, 0x9, 0x0, 0x10001, 0x4})
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000001c0)={0x5, 0x2b})

12:15:33 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="0400000000009caa47444890e4e6f06ec900001000020000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[])
lseek(r2, 0x0, 0x3)
llistxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=""/235, 0xeb)
ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

[ 2760.594028] syz-executor.5: attempt to access beyond end of device
[ 2760.594028] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2760.595020] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2760.601073] syz-executor.5: attempt to access beyond end of device
[ 2760.601073] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2760.602091] Buffer I/O error on dev loop5, logical block 10, lost async page write
12:15:34 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="d9d3e8a59d160acbfa240f89a6570700"/28, @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0xc0003, 0x0)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x8000000000000000, 0x0, 0xc, 0x0, 0x0, 0xfffd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:34 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x3)

12:15:34 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0xf1, 0x40, 0x15, 0x0, 0x2, 0x80020, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000440)}, 0x464, 0x7, 0x193, 0x7, 0xff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x3)
sendfile(r2, r3, 0x0, 0x1)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x20, 0x81, 0x6, 0x0, 0x0, 0x80052, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5}, 0x40400, 0x3, 0x7ee, 0x4, 0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0x6, r1, 0x3)

12:15:34 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="d9d390ba4e050acbfa244f89a6b2984946df7fda1b00000000000000c52784c4eb13328e1fc992f59a73d3c85b900f92505ae49533ef8583f167738f3f707246786e", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1, 0x88, 0x81, 0x0, 0x2, 0x15704, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1e1, 0x8, 0xfff, 0x0, 0x7, 0xf83, 0x6, 0x0, 0x713, 0x0, 0x30000000000}, 0x0, 0x4, r1, 0xa)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000880)={0x32f, 0xf8a})
sendfile(r0, r1, &(0x7f0000000280)=0x7, 0x10001)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000100002000000000000"], 0x2c, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2800000065ff690a75b1c799fd0ff5738f4c92f9f1fce85994c2477a00008f9b99513a6d31d05a50faaa0de1529bc4c2f9afcd7f4e05773de3425c7a470bd93eb43b78d942b255ccdbdae84693f0816751951d60f9f3ba5f438e5de982107bc7f44f15f809697f8cf0e074b75a9832d8a8f696f3c5", @ANYRES16=r4, @ANYBLOB="00012bbd7000ffdbdf253e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099001f0000002a000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x1)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000080)=0xffff1e3e, 0x4)
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x3, 0x7, &(0x7f0000000740)=[{&(0x7f0000000400)="f2a3b236d6ea5d0d1e0068400e9ba38f6893fc0e268935ff9c1e252b0deaecabc4c8d706002332b4d22244ffcc019465a00239b26acc14bf97c07946b5a7da525335098730f98d21bd94ef07", 0x4c, 0x3710}, {&(0x7f0000000480)="fbb96491fd7d319ca7b8cc12bdb440f2dce0bd2f8c2f3d1d06f895e43312956e8e01f966fae96d59264b6accddf184029084665b8d4bdc9b6f47755764e0b39d1ce8eceb8a904d5657b19d0dde99137a", 0x50, 0x5bac0ea2}, {&(0x7f0000000500)="a47d8ef922f44cceee91beca90dda22e279178a861e4f2f221fd46e8bd8c85cbd769bb81b588fe49fb2e1e7bf6feceaf3fa95cd28eb28e3eede06a8972e6c812f17d35da36873f06499bf335d0088f616c10976a4515", 0x56, 0x5}, {&(0x7f00000015c0)="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", 0x1000, 0x7}, {&(0x7f0000000580)="5a1b08bb00c2d48368fb1356f2321adf5cf496c8b7fb24c38684b0b543d9d1a83b7fed599cca4939f051b54623a802e5d24903ce531bad28e105c4bee6fd9f53f37e501f46c2b20ae1e51d970f52776e1a05c13795d64adb079cf0dd6ca9e6a7650830f0692b1a8c531849f70ce87923995c8b51e4d9857d90e5f8e70ca73c2bcfeb21d890581c1dc07290577a863e1ce90d1bf5da865f73d6237806efb7de88", 0xa0, 0x2}, {&(0x7f00000025c0)="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", 0x1000, 0x1}, {&(0x7f0000000640)="635e40b7227c4f502ba81ab412e33023a4aa189487c94f8df01e5328ca519d3b5024897f8db71f709a3b6eec94463ea1fb7ac69e24aef47d97957bb24db6eccc1fa4365a41dee75997ceaa290767d80848aef5c7b9546be2cfb7c954b06de1e5b7c492db5bf3af0865b4d93f80588b1c0a6eac5c427eb72b7598962e4d7b5fdb96f0274ce61127a29ca71d7f10c14e8d9449fb24f6f848f68e8a048cbf6ea164779fed20b36d534f23de6fa35e82709489d4fca518ebb1ef72cb8585475ebf2ef4e0a1ef1f3e29c0a5dbdfeb25dd5181d2cee0560a61396d4fdccbe7d8d188db59efc4", 0xe3, 0xae}], 0x3a5019, &(0x7f0000000800)={[{@overriderock}, {@utf8}, {@check_relaxed}, {@sbsector={'sbsector', 0x3d, 0xc1}}, {@check_strict}, {@nocompress}]})
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)

12:15:34 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"})
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[], 0x2c, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
r0 = memfd_secret(0x0)
ioctl$TIOCNXCL(r0, 0x540d)

[ 2760.852260] loop6: detected capacity change from 0 to 40
[ 2760.856289] loop7: detected capacity change from 0 to 195598
[ 2760.936642] loop5: detected capacity change from 0 to 40
[ 2760.947053] loop7: detected capacity change from 0 to 195598
[ 2761.013152] syz-executor.5: attempt to access beyond end of device
[ 2761.013152] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2761.014444] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2761.032169] syz-executor.5: attempt to access beyond end of device
[ 2761.032169] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2761.033187] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2761.725369] ==================================================================
[ 2761.725924] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70
[ 2761.726395] Read of size 8 at addr ffff88801e9424d8 by task syz-executor/12970
[ 2761.726917] 
[ 2761.727045] CPU: 0 PID: 12970 Comm: syz-executor Not tainted 6.1.0-rc4-next-20221111 #1
[ 2761.727607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2761.728176] Call Trace:
[ 2761.728368]  <TASK>
[ 2761.728535]  dump_stack_lvl+0x8f/0xb7
[ 2761.728815]  print_report+0x175/0x478
[ 2761.729104]  ? __lock_acquire+0x42c9/0x5e70
[ 2761.729416]  kasan_report+0xbf/0x1c0
[ 2761.729699]  ? __lock_acquire+0x42c9/0x5e70
[ 2761.730018]  __lock_acquire+0x42c9/0x5e70
[ 2761.730326]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 2761.730678]  ? finish_task_switch.isra.0+0x22d/0x8a0
[ 2761.731053]  ? __pfx___lock_acquire+0x10/0x10
[ 2761.731389]  ? __switch_to+0x5c3/0xf30
[ 2761.731690]  lock_acquire+0x1a6/0x530
[ 2761.731975]  ? kmemleak_scan+0x1a0/0x1600
[ 2761.732276]  ? __pfx_lock_acquire+0x10/0x10
[ 2761.732596]  ? __call_rcu_common.constprop.0+0x589/0xa40
[ 2761.732996]  ? __call_rcu_common.constprop.0+0x589/0xa40
[ 2761.733399]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2761.733740]  ? _raw_spin_lock_irq+0x45/0x50
[ 2761.734057]  _raw_spin_lock_irq+0x36/0x50
[ 2761.734367]  ? kmemleak_scan+0x1a0/0x1600
[ 2761.734678]  kmemleak_scan+0x1a0/0x1600
[ 2761.734970]  ? __pfx_kmemleak_scan+0x10/0x10
[ 2761.735295]  ? strncpy_from_user+0x208/0x3e0
[ 2761.738547]  kmemleak_write+0x574/0x680
[ 2761.738839]  ? __pfx_kmemleak_write+0x10/0x10
[ 2761.739168]  ? debugfs_file_get+0x1d2/0x450
[ 2761.739475]  ? __pfx_debugfs_file_get+0x10/0x10
[ 2761.739825]  full_proxy_write+0x121/0x190
[ 2761.740126]  vfs_write+0x2cf/0xd90
[ 2761.740383]  ? __pfx_full_proxy_write+0x10/0x10
[ 2761.740728]  ? __pfx_vfs_write+0x10/0x10
[ 2761.741027]  ? lock_release+0x3b6/0x750
[ 2761.741307]  ? __up_read+0x192/0x730
[ 2761.741584]  ? handle_mm_fault+0x69a/0x970
[ 2761.741894]  ? __pfx___up_read+0x10/0x10
[ 2761.742188]  ? __fget_light+0x212/0x280
[ 2761.742481]  ksys_write+0x12b/0x260
[ 2761.742747]  ? __pfx_ksys_write+0x10/0x10
[ 2761.743046]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2761.743411]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2761.743784]  do_syscall_64+0x3f/0x90
[ 2761.744056]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2761.744427] RIP: 0033:0x7f719710d5c3
[ 2761.744696] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18
[ 2761.745930] RSP: 002b:00007ffc7ef67138 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2761.746462] RAX: ffffffffffffffda RBX: 00007ffc7ef67778 RCX: 00007f719710d5c3
[ 2761.746959] RDX: 0000000000000004 RSI: 00007f71971c3ed9 RDI: 0000000000000003
[ 2761.747442] RBP: 0000000000000002 R08: 0000000000000ac9 R09: 00007ffc7eff4080
[ 2761.748078] R10: 00007ffc7eff4090 R11: 0000000000000246 R12: 00000000fffffff6
[ 2761.748730] R13: 00007ffc7ef67ef1 R14: 0000000000000000 R15: 00000000002a2189
[ 2761.749393]  </TASK>
[ 2761.749621] 
[ 2761.749787] Allocated by task 12971:
[ 2761.750137]  kasan_save_stack+0x22/0x50
[ 2761.750534]  kasan_set_track+0x25/0x30
[ 2761.750910]  __kasan_slab_alloc+0x5c/0x70
[ 2761.751299]  kmem_cache_alloc+0x1b1/0x3e0
[ 2761.751695]  __create_object+0x3d/0xc00
[ 2761.752090]  kmem_cache_alloc+0x23d/0x3e0
[ 2761.752482]  __alloc_file+0x21/0x240
[ 2761.752845]  alloc_empty_file+0x71/0x170
[ 2761.753236]  path_openat+0xd4/0x29b0
[ 2761.753605]  do_filp_open+0x1ba/0x410
[ 2761.753968]  do_sys_openat2+0x171/0x4c0
[ 2761.754355]  __x64_sys_openat+0x143/0x200
[ 2761.754781]  do_syscall_64+0x3f/0x90
[ 2761.755139]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2761.755617] 
[ 2761.755735] Freed by task 12973:
[ 2761.755944]  kasan_save_stack+0x22/0x50
[ 2761.756199]  kasan_set_track+0x25/0x30
[ 2761.756454]  kasan_save_free_info+0x2e/0x50
[ 2761.756726]  __kasan_slab_free+0x10a/0x190
[ 2761.756996]  kmem_cache_free+0xfb/0x610
[ 2761.757253]  rcu_core+0x7e2/0x2090
[ 2761.757485]  __do_softirq+0x1c7/0x8f9
[ 2761.757729] 
[ 2761.757839] Last potentially related work creation:
[ 2761.758139]  kasan_save_stack+0x22/0x50
[ 2761.758398]  __kasan_record_aux_stack+0x95/0xb0
[ 2761.758701]  __call_rcu_common.constprop.0+0x6a/0xa40
[ 2761.759021]  kmem_cache_free+0xc1/0x610
[ 2761.759275]  rcu_core+0x7e2/0x2090
[ 2761.759513]  __do_softirq+0x1c7/0x8f9
[ 2761.759759] 
[ 2761.759870] Second to last potentially related work creation:
[ 2761.760218]  kasan_save_stack+0x22/0x50
[ 2761.760475]  __kasan_record_aux_stack+0x95/0xb0
[ 2761.760770]  __call_rcu_common.constprop.0+0x6a/0xa40
[ 2761.761093]  kmem_cache_free+0xc1/0x610
[ 2761.761351]  exit_mmap+0x253/0x680
[ 2761.761584]  mmput+0xd5/0x390
[ 2761.761794]  do_exit+0x99b/0x2720
[ 2761.762019]  do_group_exit+0xd4/0x2a0
[ 2761.762261]  __x64_sys_exit_group+0x3e/0x50
[ 2761.762531]  do_syscall_64+0x3f/0x90
[ 2761.762766]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2761.763091] 
[ 2761.763202] The buggy address belongs to the object at ffff88801e9424c0
[ 2761.763202]  which belongs to the cache kmemleak_object of size 240
[ 2761.763953] The buggy address is located 24 bytes inside of
[ 2761.763953]  240-byte region [ffff88801e9424c0, ffff88801e9425b0)
[ 2761.764639] 
[ 2761.764749] The buggy address belongs to the physical page:
[ 2761.765085] page:00000000d9afdcdd refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801e942980 pfn:0x1e942
[ 2761.765711] flags: 0x100000000000200(slab|node=0|zone=1)
[ 2761.766046] raw: 0100000000000200 ffff88800804f780 ffffea00002ff310 ffffea00002475d0
[ 2761.766529] raw: ffff88801e942980 00000000000d000c 00000001ffffffff 0000000000000000
[ 2761.766986] page dumped because: kasan: bad access detected
[ 2761.767323] 
[ 2761.767435] Memory state around the buggy address:
[ 2761.767730]  ffff88801e942380: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2761.768164]  ffff88801e942400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2761.768598] >ffff88801e942480: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 2761.769028]                                                     ^
[ 2761.769399]  ffff88801e942500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2761.769832]  ffff88801e942580: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb
[ 2761.770268] ==================================================================
[ 2761.770706] Disabling lock debugging due to kernel taint

VM DIAGNOSIS:
12:15:35  Registers:
info registers vcpu 0
RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8246aa15 RDI=ffffffff87bb7a20 RBP=ffffffff87bb79e0 RSP=ffff888043277248
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000073 R11=0000000000000001
R12=0000000000000073 R13=ffffffff87bb79e0 R14=0000000000000010 R15=ffffffff8246aa00
RIP=ffffffff8246aa6d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556c2c400 00000000 00000000
GS =0000 ffff88806d000000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe1c59d3a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe1c59d38000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005587bbbfa100 CR3=0000000040946000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=ff0000000000ff00000000ff000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffffffffffff00000000000000000000
XMM06=00000000000065616124242f6867632f XMM07=00000000000000000000000000000000
XMM08=2064616572206f742064656c69614600 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000035d60 RCX=ffffffff877b1740 RDX=1ffff11002fe5b33
RSI=1ffffffff0a03119 RDI=ffffffff850188c8 RBP=0000000000000001 RSP=ffff8880097b79f0
R8 =ffff88806d135d88 R9 =0000000000000000 R10=ffffffff817ea747 R11=0000000000000001
R12=ffff888016806000 R13=ffffffff877b1740 R14=0000000000000040 R15=0000000000000001
RIP=ffffffff817ea889 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd822de18c0 00000000 00000000
GS =0000 ffff88806d100000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe241df2b000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe241df29000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005587bb39ebd0 CR3=00000000406b8000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00005587bbbedfc000005587bbbedfc0 XMM01=00000000ffffffff0000000000000000
XMM02=00ffff00000000000000000000000000 XMM03=0000000000ff0000000000ff000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffffffffffff00000000000000000000
XMM06=00000000000065616124242f6867632f XMM07=00000000000000000000000000000000
XMM08=200000323a372f6b636f6c622f766564 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000