0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2262.133441] loop0: detected capacity change from 0 to 40
[ 2262.142401] loop7: detected capacity change from 0 to 40
[ 2262.173017] syz-executor.6: attempt to access beyond end of device
[ 2262.173017] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2262.174225] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:24:25 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c", 0x34, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2262.190014] FAT-fs (loop0): invalid media value (0x00)
[ 2262.191057] FAT-fs (loop0): Can't find a valid FAT filesystem
[ 2262.218845] loop3: detected capacity change from 0 to 40
[ 2262.234594] loop5: detected capacity change from 0 to 40
[ 2262.244029] loop0: detected capacity change from 0 to 264192
[ 2262.252345] FAT-fs (loop5): invalid media value (0x00)
[ 2262.252718] FAT-fs (loop5): Can't find a valid FAT filesystem
17:24:25 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c665609933bfadc01cb48183e93f53c0b949d4e4a8cbb2bfbf3", 0x4d, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2262.265866] loop1: detected capacity change from 0 to 40
[ 2262.282374] loop5: detected capacity change from 0 to 264192
[ 2262.342570] loop6: detected capacity change from 0 to 40
17:24:25 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c", 0x34, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2262.426370] loop1: detected capacity change from 0 to 40
[ 2262.522761] syz-executor.2: attempt to access beyond end of device
[ 2262.522761] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2262.524903] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2262.622035] syz-executor.3: attempt to access beyond end of device
[ 2262.622035] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2262.623937] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:24:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c", 0x34, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c665609933bfadc01cb48183e93f53c0b949d4e4a8cbb2bfbf3", 0x4d, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c665609933bfadc01cb48183e93f53c0b949d4e4a8cbb2bfbf3", 0x4d, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2262.775022] loop1: detected capacity change from 0 to 40
[ 2262.823316] loop2: detected capacity change from 0 to 40
[ 2262.838661] loop3: detected capacity change from 0 to 40
17:24:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c", 0x34, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2262.879054] syz-executor.2: attempt to access beyond end of device
[ 2262.879054] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2262.880038] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2262.904888] syz-executor.6: attempt to access beyond end of device
[ 2262.904888] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2262.907604] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:24:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c665609933bfadc01cb48183e93f53c0b949d4e4a8cbb2bfbf3", 0x4d, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2262.940180] loop1: detected capacity change from 0 to 40
17:24:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c", 0x34, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c665609933bfadc01cb48183e93f53c0b949d4e4a8cbb2bfbf3", 0x4d, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2263.068472] loop2: detected capacity change from 0 to 40
17:24:26 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2263.124398] loop1: detected capacity change from 0 to 40
[ 2263.126689] syz-executor.7: attempt to access beyond end of device
[ 2263.126689] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2263.128463] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2263.133960] syz-executor.3: attempt to access beyond end of device
[ 2263.133960] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2263.135220] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2263.157402] loop6: detected capacity change from 0 to 40
[ 2263.259437] loop4: detected capacity change from 0 to 40
17:24:42 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:42 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:42 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c", 0x34, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:42 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c665609933bfadc01cb48183e93f53c0b949d4e4a8cbb2bfbf3", 0x4d, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:42 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:42 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:42 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2279.499163] loop6: detected capacity change from 0 to 40
[ 2279.501827] loop7: detected capacity change from 0 to 40
[ 2279.507650] loop5: detected capacity change from 0 to 40
[ 2279.511030] loop2: detected capacity change from 0 to 40
[ 2279.525776] FAT-fs (loop5): invalid media value (0x00)
[ 2279.526511] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2279.530290] loop3: detected capacity change from 0 to 40
[ 2279.530799] loop4: detected capacity change from 0 to 40
[ 2279.536168] loop0: detected capacity change from 0 to 40
[ 2279.537834] loop1: detected capacity change from 0 to 40
[ 2279.583361] FAT-fs (loop0): invalid media value (0x00)
[ 2279.584142] FAT-fs (loop0): Can't find a valid FAT filesystem
[ 2279.586768] loop5: detected capacity change from 0 to 264192
[ 2279.594269] loop4: detected capacity change from 0 to 264192
[ 2279.643594] loop0: detected capacity change from 0 to 264192
[ 2279.741624] bio_check_eod: 3 callbacks suppressed
[ 2279.741660] syz-executor.2: attempt to access beyond end of device
[ 2279.741660] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2279.744066] buffer_io_error: 3 callbacks suppressed
[ 2279.744085] Buffer I/O error on dev loop2, logical block 10, lost async page write
17:24:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c665609933bfadc01cb48183e93f53c0b949d4e4a8cbb2bfbf3", 0x4d, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2280.071881] loop2: detected capacity change from 0 to 40
[ 2280.272028] syz-executor.6: attempt to access beyond end of device
[ 2280.272028] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2280.273883] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2280.719135] syz-executor.2: attempt to access beyond end of device
[ 2280.719135] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2280.721244] Buffer I/O error on dev loop2, logical block 10, lost async page write
17:24:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c", 0x34, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2294.192859] loop1: detected capacity change from 0 to 40
[ 2294.194619] loop6: detected capacity change from 0 to 40
17:24:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:57 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c", 0x34, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:57 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c665609933bfadc01cb48183e93f53c0b949d4e4a8cbb2bfbf3", 0x4d, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2294.229458] loop5: detected capacity change from 0 to 40
[ 2294.254167] loop7: detected capacity change from 0 to 40
[ 2294.266179] FAT-fs (loop5): invalid media value (0x00)
[ 2294.267147] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2294.279505] loop3: detected capacity change from 0 to 40
[ 2294.292073] loop4: detected capacity change from 0 to 40
[ 2294.296175] FAT-fs (loop7): invalid media value (0x00)
[ 2294.297056] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2294.298978] loop2: detected capacity change from 0 to 40
[ 2294.301468] loop0: detected capacity change from 0 to 40
[ 2294.313336] FAT-fs (loop0): bogus number of FAT sectors
[ 2294.313747] FAT-fs (loop0): Can't find a valid FAT filesystem
[ 2294.335393] loop5: detected capacity change from 0 to 264192
[ 2294.353706] loop0: detected capacity change from 0 to 264192
[ 2294.358031] loop4: detected capacity change from 0 to 264192
[ 2294.362389] loop7: detected capacity change from 0 to 264192
[ 2294.442904] syz-executor.1: attempt to access beyond end of device
[ 2294.442904] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2294.444331] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2294.549917] syz-executor.6: attempt to access beyond end of device
[ 2294.549917] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2294.550942] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:24:57 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c", 0x34, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2294.726746] loop1: detected capacity change from 0 to 40
[ 2294.743188] loop6: detected capacity change from 0 to 40
[ 2294.744552] syz-executor.2: attempt to access beyond end of device
[ 2294.744552] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2294.746312] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2294.762099] syz-executor.3: attempt to access beyond end of device
[ 2294.762099] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2294.764881] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:24:58 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c", 0x34, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c665609933bfadc01cb48183e93f53c0b949d4e4a8cbb2bfbf3", 0x4d, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2294.995435] loop2: detected capacity change from 0 to 40
[ 2295.009581] loop3: detected capacity change from 0 to 40
17:24:58 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2295.223941] syz-executor.1: attempt to access beyond end of device
[ 2295.223941] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2295.227270] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:24:58 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c665609933bfadc01cb48183e93f53c0b949d4e4a8cbb2bfbf3", 0x4d, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:24:58 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2295.259187] loop5: detected capacity change from 0 to 40
[ 2295.284902] FAT-fs (loop5): invalid media value (0x00)
[ 2295.285457] FAT-fs (loop5): Can't find a valid FAT filesystem
17:24:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2295.335068] loop5: detected capacity change from 0 to 264192
[ 2295.393197] loop7: detected capacity change from 0 to 40
[ 2295.398601] loop0: detected capacity change from 0 to 40
[ 2295.412684] FAT-fs (loop0): bogus number of FAT sectors
[ 2295.413630] FAT-fs (loop0): Can't find a valid FAT filesystem
[ 2295.419606] loop4: detected capacity change from 0 to 40
[ 2295.468678] loop4: detected capacity change from 0 to 264192
[ 2295.490571] loop0: detected capacity change from 0 to 264192
[ 2295.768224] syz-executor.2: attempt to access beyond end of device
[ 2295.768224] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2295.771196] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2295.925672] syz-executor.3: attempt to access beyond end of device
[ 2295.925672] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2295.927358] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2296.127033] syz-executor.7: attempt to access beyond end of device
[ 2296.127033] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2296.129373] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2310.802094] loop1: detected capacity change from 0 to 40
[ 2310.807165] loop3: detected capacity change from 0 to 40
[ 2310.810215] loop0: detected capacity change from 0 to 40
[ 2310.812638] loop5: detected capacity change from 0 to 40
[ 2310.812974] loop7: detected capacity change from 0 to 40
[ 2310.816494] FAT-fs (loop0): bogus number of FAT sectors
[ 2310.816940] FAT-fs (loop0): Can't find a valid FAT filesystem
[ 2310.817792] FAT-fs (loop5): bogus number of FAT sectors
[ 2310.818155] FAT-fs (loop5): Can't find a valid FAT filesystem
17:25:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c", 0x34, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c665609933bfadc01cb48183e93f53c0b949d4e4a8cbb2bfbf3", 0x4d, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2310.827979] loop4: detected capacity change from 0 to 264192
[ 2310.854773] loop2: detected capacity change from 0 to 40
[ 2310.856296] loop6: detected capacity change from 0 to 40
[ 2310.858770] loop0: detected capacity change from 0 to 264192
[ 2310.865087] loop5: detected capacity change from 0 to 264192
[ 2311.213220] syz-executor.7: attempt to access beyond end of device
[ 2311.213220] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2311.214630] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2311.271962] syz-executor.3: attempt to access beyond end of device
[ 2311.271962] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2311.273212] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2311.391182] syz-executor.2: attempt to access beyond end of device
[ 2311.391182] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2311.392420] Buffer I/O error on dev loop2, logical block 10, lost async page write
17:25:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c665609933bfadc01cb48183e93f53c0b949d4e4a8cbb2bfbf3", 0x4d, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2311.448925] syz-executor.1: attempt to access beyond end of device
[ 2311.448925] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2311.450149] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:25:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262100c", 0x34, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2311.491540] loop7: detected capacity change from 0 to 40
[ 2311.547710] loop3: detected capacity change from 0 to 40
17:25:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2311.569557] syz-executor.6: attempt to access beyond end of device
[ 2311.569557] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2311.573996] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2311.679995] loop1: detected capacity change from 0 to 40
17:25:15 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2311.702918] loop2: detected capacity change from 0 to 40
17:25:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:15 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2311.774112] loop6: detected capacity change from 0 to 40
[ 2311.819206] syz-executor.7: attempt to access beyond end of device
[ 2311.819206] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2311.820423] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2311.828962] loop0: detected capacity change from 0 to 40
[ 2311.830626] loop5: detected capacity change from 0 to 40
[ 2311.844914] FAT-fs (loop5): bogus number of FAT sectors
[ 2311.845318] FAT-fs (loop5): Can't find a valid FAT filesystem
17:25:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2311.869010] loop5: detected capacity change from 0 to 264192
[ 2311.886302] loop4: detected capacity change from 0 to 264192
[ 2311.911679] loop2: detected capacity change from 0 to 40
[ 2311.994362] syz-executor.3: attempt to access beyond end of device
[ 2311.994362] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2311.995549] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2312.091189] syz-executor.0: attempt to access beyond end of device
[ 2312.091189] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2312.092937] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2312.204981] syz-executor.1: attempt to access beyond end of device
[ 2312.204981] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2312.206746] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2312.262078] syz-executor.6: attempt to access beyond end of device
[ 2312.262078] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2312.264098] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2325.305538] loop6: detected capacity change from 0 to 40
[ 2325.306096] loop5: detected capacity change from 0 to 40
17:25:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:28 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:28 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:28 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:28 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2325.314825] loop7: detected capacity change from 0 to 40
[ 2325.322481] FAT-fs (loop7): bogus number of FAT sectors
[ 2325.322851] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2325.329077] FAT-fs (loop5): bogus number of FAT sectors
[ 2325.329487] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2325.343978] loop5: detected capacity change from 0 to 264192
[ 2325.361934] loop7: detected capacity change from 0 to 264192
[ 2325.366208] loop3: detected capacity change from 0 to 40
[ 2325.377200] loop4: detected capacity change from 0 to 264192
[ 2325.384692] loop2: detected capacity change from 0 to 40
[ 2325.391599] loop0: detected capacity change from 0 to 40
[ 2325.395506] loop1: detected capacity change from 0 to 40
17:25:28 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 2325.633783] loop2: detected capacity change from 0 to 40
[ 2325.718052] syz-executor.6: attempt to access beyond end of device
[ 2325.718052] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2325.719732] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:25:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 2325.773828] syz-executor.0: attempt to access beyond end of device
[ 2325.773828] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2325.775065] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2325.798665] loop2: detected capacity change from 0 to 40
17:25:29 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 2325.945195] loop6: detected capacity change from 0 to 40
[ 2325.980152] loop0: detected capacity change from 0 to 40
[ 2326.027412] loop2: detected capacity change from 0 to 40
[ 2326.103919] syz-executor.3: attempt to access beyond end of device
[ 2326.103919] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2326.105926] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:25:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

17:25:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2326.270051] loop2: detected capacity change from 0 to 40
17:25:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2326.350594] loop5: detected capacity change from 0 to 40
[ 2326.365000] FAT-fs (loop4): bogus number of reserved sectors
[ 2326.365806] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2326.377925] syz-executor.6: attempt to access beyond end of device
[ 2326.377925] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2326.379937] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2326.405646] loop4: detected capacity change from 0 to 264192
[ 2326.409898] loop3: detected capacity change from 0 to 40
[ 2326.520185] syz-executor.0: attempt to access beyond end of device
[ 2326.520185] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2326.522391] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2326.636178] syz-executor.5: attempt to access beyond end of device
[ 2326.636178] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2326.638036] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2326.686057] syz-executor.3: attempt to access beyond end of device
[ 2326.686057] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2326.688060] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:25:43 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:43 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2340.220192] loop1: detected capacity change from 0 to 40
[ 2340.224083] loop2: detected capacity change from 0 to 40
[ 2340.226461] FAT-fs (loop4): bogus number of reserved sectors
[ 2340.226939] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2340.228351] loop7: detected capacity change from 0 to 40
[ 2340.228457] loop0: detected capacity change from 0 to 40
[ 2340.231714] loop6: detected capacity change from 0 to 40
17:25:43 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:43 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 2340.247090] loop4: detected capacity change from 0 to 264192
[ 2340.281433] loop5: detected capacity change from 0 to 40
[ 2340.294038] loop3: detected capacity change from 0 to 40
17:25:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 2340.552594] loop2: detected capacity change from 0 to 40
[ 2340.638914] syz-executor.1: attempt to access beyond end of device
[ 2340.638914] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2340.640248] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:25:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2340.715058] syz-executor.5: attempt to access beyond end of device
[ 2340.715058] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2340.716896] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2340.726142] syz-executor.3: attempt to access beyond end of device
[ 2340.726142] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2340.728168] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2340.728965] syz-executor.7: attempt to access beyond end of device
[ 2340.728965] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2340.728995] Buffer I/O error on dev loop7, logical block 10, lost async page write
17:25:44 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2340.777640] loop2: detected capacity change from 0 to 40
[ 2340.812144] syz-executor.6: attempt to access beyond end of device
[ 2340.812144] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2340.813864] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2340.882281] loop1: detected capacity change from 0 to 40
[ 2341.193100] syz-executor.1: attempt to access beyond end of device
[ 2341.193100] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2341.194335] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:25:58 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:58 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:58 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:58 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:58 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2355.152430] FAT-fs (loop4): bogus number of reserved sectors
[ 2355.153255] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2355.161845] loop7: detected capacity change from 0 to 40
[ 2355.163802] loop1: detected capacity change from 0 to 40
[ 2355.169310] loop6: detected capacity change from 0 to 40
[ 2355.176958] loop5: detected capacity change from 0 to 40
[ 2355.182931] loop2: detected capacity change from 0 to 40
[ 2355.185615] FAT-fs (loop3): bogus number of reserved sectors
[ 2355.186475] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2355.192009] loop0: detected capacity change from 0 to 40
[ 2355.207014] loop4: detected capacity change from 0 to 264192
[ 2355.247333] loop3: detected capacity change from 0 to 264192
[ 2355.732136] syz-executor.5: attempt to access beyond end of device
[ 2355.732136] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2355.734139] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2355.840470] syz-executor.6: attempt to access beyond end of device
[ 2355.840470] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2355.843034] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:25:59 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2356.022735] loop6: detected capacity change from 0 to 40
17:25:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2356.118047] loop5: detected capacity change from 0 to 40
17:25:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2356.168866] loop1: detected capacity change from 0 to 40
[ 2356.196598] loop2: detected capacity change from 0 to 40
17:25:59 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:25:59 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2356.311905] loop0: detected capacity change from 0 to 40
[ 2356.316953] FAT-fs (loop4): bogus number of reserved sectors
[ 2356.317593] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2356.356168] loop4: detected capacity change from 0 to 264192
17:25:59 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2356.424979] loop7: detected capacity change from 0 to 40
[ 2356.594116] syz-executor.6: attempt to access beyond end of device
[ 2356.594116] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2356.595963] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2356.642319] loop3: detected capacity change from 0 to 40
17:26:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2356.713904] syz-executor.1: attempt to access beyond end of device
[ 2356.713904] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2356.716984] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2356.802036] loop6: detected capacity change from 0 to 40
17:26:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2357.017510] loop1: detected capacity change from 0 to 40
[ 2357.138175] syz-executor.7: attempt to access beyond end of device
[ 2357.138175] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2357.140277] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2357.328057] syz-executor.3: attempt to access beyond end of device
[ 2357.328057] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2357.330081] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2357.390017] syz-executor.1: attempt to access beyond end of device
[ 2357.390017] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2357.392072] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2357.397112] syz-executor.6: attempt to access beyond end of device
[ 2357.397112] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2357.398979] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:26:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:14 executing program 2:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2371.390452] loop3: detected capacity change from 0 to 40
[ 2371.393633] loop6: detected capacity change from 0 to 40
[ 2371.397389] loop7: detected capacity change from 0 to 40
17:26:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2371.424162] loop5: detected capacity change from 0 to 40
[ 2371.453149] loop0: detected capacity change from 0 to 40
[ 2371.484555] FAT-fs (loop4): bogus number of reserved sectors
[ 2371.485645] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2371.487549] loop1: detected capacity change from 0 to 40
[ 2371.541127] loop4: detected capacity change from 0 to 264192
[ 2371.774044] syz-executor.3: attempt to access beyond end of device
[ 2371.774044] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2371.775867] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2371.788664] syz-executor.6: attempt to access beyond end of device
[ 2371.788664] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2371.790135] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:26:15 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:15 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2371.981099] syz-executor.7: attempt to access beyond end of device
[ 2371.981099] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2371.982930] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2372.019031] syz-executor.1: attempt to access beyond end of device
[ 2372.019031] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2372.020694] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2372.022783] loop6: detected capacity change from 0 to 40
[ 2372.083551] loop3: detected capacity change from 0 to 40
17:26:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:15 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2372.260010] loop1: detected capacity change from 0 to 40
[ 2372.283982] loop7: detected capacity change from 0 to 40
17:26:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:15 executing program 2:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:15 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2372.463952] loop5: detected capacity change from 0 to 40
[ 2372.521078] syz-executor.6: attempt to access beyond end of device
[ 2372.521078] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2372.522977] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2372.547715] FAT-fs (loop4): bogus number of reserved sectors
[ 2372.548326] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2372.565205] loop0: detected capacity change from 0 to 40
[ 2372.590680] loop4: detected capacity change from 0 to 264192
17:26:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2372.893052] loop6: detected capacity change from 0 to 40
[ 2373.337014] syz-executor.6: attempt to access beyond end of device
[ 2373.337014] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2373.338989] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:26:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:32 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:32 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:32 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:32 executing program 2:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2389.116967] loop3: detected capacity change from 0 to 40
[ 2389.122457] loop0: detected capacity change from 0 to 40
[ 2389.153269] loop6: detected capacity change from 0 to 40
[ 2389.154389] loop4: detected capacity change from 0 to 40
[ 2389.157466] loop5: detected capacity change from 0 to 40
[ 2389.166169] loop7: detected capacity change from 0 to 40
[ 2389.168033] loop1: detected capacity change from 0 to 40
[ 2389.174004] FAT-fs (loop4): bogus number of reserved sectors
[ 2389.174739] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2389.236640] loop4: detected capacity change from 0 to 264192
[ 2389.646946] syz-executor.6: attempt to access beyond end of device
[ 2389.646946] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2389.648949] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2389.657858] syz-executor.1: attempt to access beyond end of device
[ 2389.657858] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2389.659214] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2389.673994] syz-executor.7: attempt to access beyond end of device
[ 2389.673994] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2389.676180] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2389.753006] syz-executor.3: attempt to access beyond end of device
[ 2389.753006] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2389.754918] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:26:33 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:33 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2389.872721] loop6: detected capacity change from 0 to 40
[ 2389.874816] loop1: detected capacity change from 0 to 40
17:26:33 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:33 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2389.955679] loop7: detected capacity change from 0 to 40
17:26:33 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2390.072787] loop3: detected capacity change from 0 to 40
17:26:33 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:33 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:33 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2390.157171] loop0: detected capacity change from 0 to 40
[ 2390.180201] loop2: detected capacity change from 0 to 40
[ 2390.211589] loop5: detected capacity change from 0 to 40
[ 2390.226074] syz-executor.7: attempt to access beyond end of device
[ 2390.226074] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2390.227326] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2390.258916] loop4: detected capacity change from 0 to 40
[ 2390.267366] syz-executor.1: attempt to access beyond end of device
[ 2390.267366] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2390.268532] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2390.272366] FAT-fs (loop4): bogus number of reserved sectors
[ 2390.273085] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2390.322024] loop4: detected capacity change from 0 to 264192
17:26:33 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2390.398776] loop7: detected capacity change from 0 to 40
[ 2390.572670] syz-executor.6: attempt to access beyond end of device
[ 2390.572670] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2390.574919] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2390.617039] syz-executor.3: attempt to access beyond end of device
[ 2390.617039] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2390.618886] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2390.687027] syz-executor.7: attempt to access beyond end of device
[ 2390.687027] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2390.688939] Buffer I/O error on dev loop7, logical block 10, lost async page write
17:26:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:46 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99", 0x1a, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:46 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2403.222285] loop3: detected capacity change from 0 to 40
[ 2403.240160] loop4: detected capacity change from 0 to 40
17:26:46 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:46 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:46 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:46 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2403.248931] loop0: detected capacity change from 0 to 40
[ 2403.253366] loop6: detected capacity change from 0 to 40
[ 2403.253847] loop2: detected capacity change from 0 to 40
[ 2403.255950] loop1: detected capacity change from 0 to 40
[ 2403.273738] loop5: detected capacity change from 0 to 40
[ 2403.277482] FAT-fs (loop4): bogus number of reserved sectors
[ 2403.277945] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2403.304709] loop4: detected capacity change from 0 to 264192
[ 2403.314458] loop7: detected capacity change from 0 to 40
17:26:46 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2403.491647] loop0: detected capacity change from 0 to 40
17:26:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2403.910178] loop0: detected capacity change from 0 to 40
[ 2404.058210] syz-executor.6: attempt to access beyond end of device
[ 2404.058210] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2404.061260] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:26:47 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:47 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99", 0x1a, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:47 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:26:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2404.331666] loop5: detected capacity change from 0 to 40
[ 2404.378702] loop0: detected capacity change from 0 to 40
[ 2404.396961] loop1: detected capacity change from 0 to 40
[ 2404.410198] loop6: detected capacity change from 0 to 40
[ 2404.420823] loop4: detected capacity change from 0 to 40
[ 2404.434712] FAT-fs (loop4): bogus number of reserved sectors
[ 2404.435669] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2404.481155] loop4: detected capacity change from 0 to 264192
[ 2405.041017] syz-executor.6: attempt to access beyond end of device
[ 2405.041017] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2405.042880] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2405.114169] syz-executor.1: attempt to access beyond end of device
[ 2405.114169] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2405.115857] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:27:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:02 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:02 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99", 0x1a, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:02 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:02 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99", 0x1a, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:02 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:02 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:02 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2418.721042] loop2: detected capacity change from 0 to 40
[ 2418.730135] loop7: detected capacity change from 0 to 40
[ 2418.739814] loop5: detected capacity change from 0 to 40
[ 2418.790887] loop6: detected capacity change from 0 to 40
[ 2418.794414] loop4: detected capacity change from 0 to 40
[ 2418.795474] loop0: detected capacity change from 0 to 40
[ 2418.800626] loop3: detected capacity change from 0 to 40
[ 2418.808749] loop1: detected capacity change from 0 to 40
[ 2418.822051] FAT-fs (loop4): bogus number of reserved sectors
[ 2418.822695] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2418.867432] loop4: detected capacity change from 0 to 264192
17:27:02 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:02 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2419.030841] loop5: detected capacity change from 0 to 40
[ 2419.157134] loop0: detected capacity change from 0 to 40
[ 2419.370907] syz-executor.6: attempt to access beyond end of device
[ 2419.370907] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2419.372899] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2419.443113] syz-executor.7: attempt to access beyond end of device
[ 2419.443113] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2419.445929] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2419.486063] syz-executor.1: attempt to access beyond end of device
[ 2419.486063] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2419.487891] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2419.672157] syz-executor.3: attempt to access beyond end of device
[ 2419.672157] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2419.674744] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:27:16 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99", 0x1a, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80", 0x27, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:16 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2433.557388] loop5: detected capacity change from 0 to 40
17:27:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2433.567364] loop2: detected capacity change from 0 to 40
[ 2433.577796] loop0: detected capacity change from 0 to 40
[ 2433.579676] loop7: detected capacity change from 0 to 40
17:27:16 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2433.623694] loop6: detected capacity change from 0 to 40
[ 2433.630391] loop3: detected capacity change from 0 to 40
[ 2433.632491] loop4: detected capacity change from 0 to 40
[ 2433.633839] loop1: detected capacity change from 0 to 40
[ 2433.655382] FAT-fs (loop4): bogus number of reserved sectors
[ 2433.656159] FAT-fs (loop4): Can't find a valid FAT filesystem
17:27:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2433.714048] loop4: detected capacity change from 0 to 264192
[ 2433.789481] loop5: detected capacity change from 0 to 40
17:27:17 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2433.996726] loop0: detected capacity change from 0 to 40
[ 2434.070829] loop5: detected capacity change from 0 to 40
[ 2434.094063] syz-executor.7: attempt to access beyond end of device
[ 2434.094063] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2434.096171] Buffer I/O error on dev loop7, logical block 10, lost async page write
17:27:17 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:17 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2434.376099] syz-executor.1: attempt to access beyond end of device
[ 2434.376099] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2434.378308] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2434.402126] syz-executor.6: attempt to access beyond end of device
[ 2434.402126] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2434.404917] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2434.435322] loop5: detected capacity change from 0 to 40
[ 2434.459056] loop0: detected capacity change from 0 to 40
[ 2434.502908] loop7: detected capacity change from 0 to 40
17:27:17 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80", 0x27, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2434.633134] loop6: detected capacity change from 0 to 40
17:27:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2434.679823] loop1: detected capacity change from 0 to 40
17:27:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2434.722624] loop4: detected capacity change from 0 to 40
[ 2434.737791] FAT-fs (loop4): bogus number of reserved sectors
[ 2434.738871] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2434.744988] loop2: detected capacity change from 0 to 40
[ 2434.750095] loop5: detected capacity change from 0 to 40
17:27:18 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2434.812757] loop4: detected capacity change from 0 to 264192
[ 2434.833135] loop3: detected capacity change from 0 to 40
[ 2434.864019] loop0: detected capacity change from 0 to 40
[ 2434.924788] loop7: detected capacity change from 0 to 40
17:27:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2435.130530] loop5: detected capacity change from 0 to 40
[ 2435.245720] loop0: detected capacity change from 0 to 40
17:27:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2435.485812] loop5: detected capacity change from 0 to 40
[ 2435.539577] loop0: detected capacity change from 0 to 40
[ 2435.668097] syz-executor.7: attempt to access beyond end of device
[ 2435.668097] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2435.669923] Buffer I/O error on dev loop7, logical block 10, lost async page write
17:27:34 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:34 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180), 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2451.366163] loop3: detected capacity change from 0 to 40
[ 2451.370522] loop7: detected capacity change from 0 to 40
[ 2451.380060] loop5: detected capacity change from 0 to 40
17:27:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:34 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:34 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:34 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:34 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80", 0x27, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2451.383560] loop0: detected capacity change from 0 to 40
[ 2451.386917] loop2: detected capacity change from 0 to 40
[ 2451.435024] loop1: detected capacity change from 0 to 40
[ 2451.435675] loop6: detected capacity change from 0 to 40
[ 2451.443252] loop4: detected capacity change from 0 to 40
[ 2451.445073] FAT-fs (loop4): bogus number of reserved sectors
[ 2451.445523] FAT-fs (loop4): Can't find a valid FAT filesystem
17:27:34 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2451.484665] loop4: detected capacity change from 0 to 264192
[ 2451.542632] loop0: detected capacity change from 0 to 40
17:27:34 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:35 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2451.715196] loop5: detected capacity change from 0 to 40
[ 2451.734886] syz-executor.3: attempt to access beyond end of device
[ 2451.734886] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2451.735916] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2451.783734] loop0: detected capacity change from 0 to 40
17:27:35 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2451.855065] syz-executor.6: attempt to access beyond end of device
[ 2451.855065] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2451.856501] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:27:35 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2451.960645] loop5: detected capacity change from 0 to 40
[ 2451.975905] syz-executor.7: attempt to access beyond end of device
[ 2451.975905] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2451.977900] Buffer I/O error on dev loop7, logical block 10, lost async page write
17:27:35 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180), 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:35 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2452.122933] syz-executor.1: attempt to access beyond end of device
[ 2452.122933] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2452.124040] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2452.136496] loop0: detected capacity change from 0 to 40
[ 2452.140184] loop3: detected capacity change from 0 to 40
[ 2452.189090] loop6: detected capacity change from 0 to 40
17:27:35 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:35 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcf", 0x2e, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2452.345191] loop1: detected capacity change from 0 to 40
17:27:35 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:35 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:35 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2452.489403] loop7: detected capacity change from 0 to 40
[ 2452.510111] loop5: detected capacity change from 0 to 40
[ 2452.544045] syz-executor.1: attempt to access beyond end of device
[ 2452.544045] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2452.545924] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2452.667032] loop0: detected capacity change from 0 to 40
[ 2452.881870] syz-executor.3: attempt to access beyond end of device
[ 2452.881870] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2452.883017] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2469.271813] loop7: detected capacity change from 0 to 40
[ 2469.275595] loop6: detected capacity change from 0 to 40
[ 2469.278036] loop0: detected capacity change from 0 to 40
[ 2469.289185] loop3: detected capacity change from 0 to 40
[ 2469.314941] loop5: detected capacity change from 0 to 40
[ 2469.315900] loop4: detected capacity change from 0 to 40
[ 2469.321630] loop1: detected capacity change from 0 to 40
[ 2469.329334] FAT-fs (loop4): bogus number of reserved sectors
[ 2469.330115] FAT-fs (loop4): Can't find a valid FAT filesystem
17:27:52 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:52 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180), 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:52 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:52 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:52 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80", 0x27, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:52 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180), 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:27:52 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcf", 0x2e, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2469.374951] loop4: detected capacity change from 0 to 264192
[ 2470.073160] syz-executor.6: attempt to access beyond end of device
[ 2470.073160] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2470.075519] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2470.108508] syz-executor.7: attempt to access beyond end of device
[ 2470.108508] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2470.111103] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2482.985195] loop0: detected capacity change from 0 to 40
[ 2482.987663] loop6: detected capacity change from 0 to 40
17:28:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80", 0x27, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcf", 0x2e, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:06 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb93", 0x23, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:06 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180), 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2483.008779] loop1: detected capacity change from 0 to 40
[ 2483.012651] loop3: detected capacity change from 0 to 40
[ 2483.025710] loop7: detected capacity change from 0 to 40
[ 2483.038010] loop4: detected capacity change from 0 to 40
[ 2483.051966] loop5: detected capacity change from 0 to 40
[ 2483.069014] FAT-fs (loop4): bogus number of reserved sectors
[ 2483.069483] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2483.083998] loop4: detected capacity change from 0 to 264192
17:28:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2483.330885] loop5: detected capacity change from 0 to 40
[ 2483.389917] syz-executor.6: attempt to access beyond end of device
[ 2483.389917] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2483.391360] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2483.399165] syz-executor.0: attempt to access beyond end of device
[ 2483.399165] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2483.400852] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2483.411396] syz-executor.1: attempt to access beyond end of device
[ 2483.411396] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2483.412516] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2483.602904] syz-executor.3: attempt to access beyond end of device
[ 2483.602904] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2483.603988] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2483.615901] syz-executor.7: attempt to access beyond end of device
[ 2483.615901] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2483.616896] Buffer I/O error on dev loop7, logical block 10, lost async page write
17:28:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb93", 0x23, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2497.389838] loop7: detected capacity change from 0 to 40
17:28:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d2", 0x31, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80", 0x27, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:20 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb93", 0x23, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2497.396320] loop4: detected capacity change from 0 to 40
[ 2497.400736] loop6: detected capacity change from 0 to 40
17:28:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2497.420415] FAT-fs (loop4): bogus number of reserved sectors
[ 2497.420824] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2497.436530] loop4: detected capacity change from 0 to 264192
[ 2497.447996] loop1: detected capacity change from 0 to 40
[ 2497.449832] loop3: detected capacity change from 0 to 40
[ 2497.462281] FAT-fs (loop2): bogus number of reserved sectors
[ 2497.463071] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2497.477845] loop0: detected capacity change from 0 to 40
[ 2497.487134] loop5: detected capacity change from 0 to 40
17:28:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2497.668929] syz-executor.7: attempt to access beyond end of device
[ 2497.668929] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2497.670048] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2497.712834] loop5: detected capacity change from 0 to 40
17:28:21 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb93", 0x23, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2497.902130] loop7: detected capacity change from 0 to 40
[ 2498.035992] syz-executor.3: attempt to access beyond end of device
[ 2498.035992] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2498.037869] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2498.038053] syz-executor.5: attempt to access beyond end of device
[ 2498.038053] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2498.039880] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2498.059005] syz-executor.6: attempt to access beyond end of device
[ 2498.059005] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2498.060892] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2498.073503] syz-executor.0: attempt to access beyond end of device
[ 2498.073503] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2498.076004] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2498.092552] syz-executor.1: attempt to access beyond end of device
[ 2498.092552] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2498.094189] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:28:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d2", 0x31, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2498.194720] loop5: detected capacity change from 0 to 40
[ 2498.212206] loop1: detected capacity change from 0 to 40
17:28:21 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d2", 0x31, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:21 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb93", 0x23, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2498.307933] loop0: detected capacity change from 0 to 40
[ 2498.321540] loop6: detected capacity change from 0 to 40
[ 2498.340965] loop3: detected capacity change from 0 to 40
17:28:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:21 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2498.425579] loop4: detected capacity change from 0 to 40
[ 2498.437002] FAT-fs (loop4): bogus number of reserved sectors
[ 2498.437636] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2498.438390] FAT-fs (loop2): bogus number of reserved sectors
[ 2498.438869] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2498.473485] loop4: detected capacity change from 0 to 264192
[ 2498.552049] syz-executor.5: attempt to access beyond end of device
[ 2498.552049] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2498.553239] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2498.566868] syz-executor.7: attempt to access beyond end of device
[ 2498.566868] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2498.568195] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2498.634002] syz-executor.1: attempt to access beyond end of device
[ 2498.634002] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2498.635407] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:28:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2498.656564] syz-executor.6: attempt to access beyond end of device
[ 2498.656564] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2498.657811] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:28:22 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2498.743440] loop5: detected capacity change from 0 to 40
17:28:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d2", 0x31, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02a", 0x34, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2498.788444] FAT-fs (loop7): bogus number of reserved sectors
[ 2498.788883] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2498.816270] loop1: detected capacity change from 0 to 40
[ 2498.839156] loop6: detected capacity change from 0 to 40
17:28:22 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb93", 0x23, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2498.943939] loop0: detected capacity change from 0 to 40
[ 2499.041567] loop3: detected capacity change from 0 to 40
17:28:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02a", 0x34, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2499.280929] loop5: detected capacity change from 0 to 40
[ 2499.314849] loop6: detected capacity change from 0 to 40
17:28:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2499.469586] FAT-fs (loop2): bogus number of reserved sectors
[ 2499.470032] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2515.870306] loop1: detected capacity change from 0 to 40
[ 2515.871526] loop7: detected capacity change from 0 to 40
[ 2515.878265] loop6: detected capacity change from 0 to 40
17:28:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:39 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:39 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb93", 0x23, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:39 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:39 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb93", 0x23, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:39 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02a", 0x34, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2515.922845] loop0: detected capacity change from 0 to 40
[ 2515.943045] FAT-fs (loop2): bogus number of reserved sectors
[ 2515.944023] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2515.959103] loop3: detected capacity change from 0 to 40
[ 2515.960317] loop4: detected capacity change from 0 to 40
[ 2515.965848] loop5: detected capacity change from 0 to 40
[ 2515.978858] FAT-fs (loop4): invalid media value (0x00)
[ 2515.979619] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2516.041119] loop4: detected capacity change from 0 to 264192
[ 2516.246004] bio_check_eod: 9 callbacks suppressed
[ 2516.246020] syz-executor.6: attempt to access beyond end of device
[ 2516.246020] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2516.247485] buffer_io_error: 9 callbacks suppressed
[ 2516.247512] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2516.252947] syz-executor.1: attempt to access beyond end of device
[ 2516.252947] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2516.253942] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2516.333176] syz-executor.0: attempt to access beyond end of device
[ 2516.333176] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2516.334948] Buffer I/O error on dev loop0, logical block 10, lost async page write
17:28:39 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:39 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb93", 0x23, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2516.428110] loop1: detected capacity change from 0 to 40
[ 2516.492503] loop6: detected capacity change from 0 to 40
[ 2516.664193] syz-executor.5: attempt to access beyond end of device
[ 2516.664193] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2516.666690] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2516.774626] syz-executor.3: attempt to access beyond end of device
[ 2516.774626] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2516.776926] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2516.792172] syz-executor.1: attempt to access beyond end of device
[ 2516.792172] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2516.793377] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2516.899928] syz-executor.6: attempt to access beyond end of device
[ 2516.899928] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2516.901921] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:28:57 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:57 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262", 0x32, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb93", 0x23, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2533.821053] loop4: detected capacity change from 0 to 40
[ 2533.823709] loop5: detected capacity change from 0 to 40
[ 2533.827204] FAT-fs (loop4): invalid media value (0x00)
[ 2533.827677] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2533.835322] FAT-fs (loop2): bogus number of reserved sectors
[ 2533.836146] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2533.850963] loop4: detected capacity change from 0 to 264192
[ 2533.870706] loop7: detected capacity change from 0 to 40
[ 2533.877604] loop0: detected capacity change from 0 to 40
[ 2533.878466] loop1: detected capacity change from 0 to 40
[ 2533.898665] loop3: detected capacity change from 0 to 40
[ 2533.902144] loop6: detected capacity change from 0 to 40
17:28:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb93", 0x23, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2534.235761] syz-executor.5: attempt to access beyond end of device
[ 2534.235761] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2534.237871] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2534.323887] syz-executor.1: attempt to access beyond end of device
[ 2534.323887] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2534.325246] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2534.355195] syz-executor.7: attempt to access beyond end of device
[ 2534.355195] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2534.356814] Buffer I/O error on dev loop7, logical block 10, lost async page write
17:28:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2534.438701] syz-executor.0: attempt to access beyond end of device
[ 2534.438701] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2534.440039] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2534.474728] syz-executor.3: attempt to access beyond end of device
[ 2534.474728] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2534.477315] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:28:57 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262", 0x32, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:57 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2534.590072] loop5: detected capacity change from 0 to 40
[ 2534.608132] loop1: detected capacity change from 0 to 40
17:28:58 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:58 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2534.766344] loop7: detected capacity change from 0 to 40
[ 2534.827887] loop0: detected capacity change from 0 to 40
17:28:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb93", 0x23, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2534.942094] loop3: detected capacity change from 0 to 40
[ 2535.009996] loop6: detected capacity change from 0 to 40
[ 2535.011288] loop4: detected capacity change from 0 to 40
[ 2535.037017] FAT-fs (loop4): invalid media value (0x00)
[ 2535.037771] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2535.089461] FAT-fs (loop2): bogus number of reserved sectors
[ 2535.090279] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2535.108188] loop4: detected capacity change from 0 to 264192
[ 2535.400246] syz-executor.1: attempt to access beyond end of device
[ 2535.400246] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2535.402873] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:28:58 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:28:58 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262", 0x32, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2535.610508] loop5: detected capacity change from 0 to 40
[ 2535.706123] syz-executor.7: attempt to access beyond end of device
[ 2535.706123] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2535.707876] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2535.721930] syz-executor.3: attempt to access beyond end of device
[ 2535.721930] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2535.722145] loop1: detected capacity change from 0 to 40
[ 2535.722909] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2535.747111] syz-executor.6: attempt to access beyond end of device
[ 2535.747111] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2535.748970] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2536.053734] syz-executor.5: attempt to access beyond end of device
[ 2536.053734] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2536.055991] Buffer I/O error on dev loop5, logical block 10, lost async page write
17:29:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262", 0x32, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa977", 0x2c, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2550.731853] loop4: detected capacity change from 0 to 40
[ 2550.735517] loop0: detected capacity change from 0 to 40
[ 2550.737901] loop7: detected capacity change from 0 to 40
[ 2550.739685] FAT-fs (loop4): invalid media value (0x00)
[ 2550.740708] loop2: detected capacity change from 0 to 40
[ 2550.741663] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2550.745785] loop5: detected capacity change from 0 to 40
[ 2550.758308] FAT-fs (loop2): bogus number of reserved sectors
[ 2550.759112] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2550.786151] loop4: detected capacity change from 0 to 264192
[ 2550.790986] loop3: detected capacity change from 0 to 40
[ 2550.793746] loop6: detected capacity change from 0 to 40
[ 2550.798549] loop1: detected capacity change from 0 to 40
[ 2551.569908] bio_check_eod: 1 callbacks suppressed
[ 2551.569963] syz-executor.7: attempt to access beyond end of device
[ 2551.569963] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2551.574087] buffer_io_error: 1 callbacks suppressed
[ 2551.574104] Buffer I/O error on dev loop7, logical block 10, lost async page write
17:29:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:15 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:15 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa977", 0x2c, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:15 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:15 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d262", 0x32, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2551.824907] loop0: detected capacity change from 0 to 40
[ 2551.828674] loop5: detected capacity change from 0 to 40
[ 2551.836943] loop4: detected capacity change from 0 to 40
[ 2551.865043] FAT-fs (loop4): invalid media value (0x00)
[ 2551.865982] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2551.882320] loop2: detected capacity change from 0 to 40
[ 2551.900007] FAT-fs (loop2): bogus number of reserved sectors
[ 2551.900912] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2551.922814] loop4: detected capacity change from 0 to 264192
[ 2551.923541] loop6: detected capacity change from 0 to 40
[ 2551.939755] loop1: detected capacity change from 0 to 40
[ 2551.957740] loop7: detected capacity change from 0 to 40
[ 2551.970502] loop3: detected capacity change from 0 to 40
[ 2552.113439] syz-executor.7: attempt to access beyond end of device
[ 2552.113439] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2552.114686] Buffer I/O error on dev loop7, logical block 10, lost async page write
17:29:15 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2552.364609] loop7: detected capacity change from 0 to 40
[ 2552.370964] syz-executor.0: attempt to access beyond end of device
[ 2552.370964] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2552.372896] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2552.439947] syz-executor.5: attempt to access beyond end of device
[ 2552.439947] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2552.441549] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2552.524182] syz-executor.1: attempt to access beyond end of device
[ 2552.524182] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2552.526437] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2552.530482] syz-executor.7: attempt to access beyond end of device
[ 2552.530482] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2552.531799] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2552.589032] syz-executor.6: attempt to access beyond end of device
[ 2552.589032] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2552.590890] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2552.597930] syz-executor.3: attempt to access beyond end of device
[ 2552.597930] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2552.599176] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2572.182114] loop6: detected capacity change from 0 to 40
[ 2572.183436] loop7: detected capacity change from 0 to 40
17:29:35 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:35 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:35 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:35 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:35 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3d02ae1bcdc764cf060fd0efcfa74997ba5742d", 0x45, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:35 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x0, 0x0, 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:35 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa977", 0x2c, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:35 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2572.202202] loop2: detected capacity change from 0 to 40
[ 2572.203985] FAT-fs (loop2): bogus number of reserved sectors
[ 2572.204543] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2572.229550] loop3: detected capacity change from 0 to 40
[ 2572.233498] syz-executor.7: attempt to access beyond end of device
[ 2572.233498] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2572.234363] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2572.251109] loop5: detected capacity change from 0 to 40
[ 2572.262833] loop4: detected capacity change from 0 to 40
[ 2572.267031] loop0: detected capacity change from 0 to 40
[ 2572.270006] loop1: detected capacity change from 0 to 40
[ 2572.281540] FAT-fs (loop4): invalid media value (0x00)
[ 2572.282396] FAT-fs (loop4): Can't find a valid FAT filesystem
17:29:35 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2572.340085] loop4: detected capacity change from 0 to 264192
[ 2572.411830] loop7: detected capacity change from 0 to 40
[ 2572.642014] syz-executor.3: attempt to access beyond end of device
[ 2572.642014] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2572.643703] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2572.718155] syz-executor.5: attempt to access beyond end of device
[ 2572.718155] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2572.720378] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2572.758079] syz-executor.1: attempt to access beyond end of device
[ 2572.758079] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2572.759106] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:29:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2572.825067] syz-executor.7: attempt to access beyond end of device
[ 2572.825067] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2572.826058] Buffer I/O error on dev loop7, logical block 10, lost async page write
17:29:36 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2572.862895] loop5: detected capacity change from 0 to 40
[ 2572.873980] syz-executor.6: attempt to access beyond end of device
[ 2572.873980] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2572.875899] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:29:36 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2572.935913] loop3: detected capacity change from 0 to 40
[ 2573.006507] syz-executor.0: attempt to access beyond end of device
[ 2573.006507] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2573.009278] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2573.062570] loop1: detected capacity change from 0 to 40
[ 2573.243036] syz-executor.5: attempt to access beyond end of device
[ 2573.243036] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2573.251207] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2573.280911] syz-executor.1: attempt to access beyond end of device
[ 2573.280911] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2573.282011] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2573.354966] syz-executor.3: attempt to access beyond end of device
[ 2573.354966] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2573.356084] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:29:50 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:50 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:50 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:50 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:50 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae772", 0x30, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:50 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:50 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2587.013397] loop0: detected capacity change from 0 to 40
[ 2587.013631] loop5: detected capacity change from 0 to 40
[ 2587.016033] loop6: detected capacity change from 0 to 40
[ 2587.017874] loop2: detected capacity change from 0 to 40
[ 2587.018752] loop3: detected capacity change from 0 to 40
[ 2587.022369] loop7: detected capacity change from 0 to 40
[ 2587.040994] FAT-fs (loop2): bogus number of reserved sectors
[ 2587.041836] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2587.058628] loop1: detected capacity change from 0 to 40
[ 2587.071073] loop4: detected capacity change from 0 to 40
[ 2587.085764] FAT-fs (loop4): bogus number of FAT sectors
[ 2587.086529] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2587.135267] loop4: detected capacity change from 0 to 264192
[ 2587.287186] syz-executor.7: attempt to access beyond end of device
[ 2587.287186] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2587.288253] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2587.307345] syz-executor.6: attempt to access beyond end of device
[ 2587.307345] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2587.308885] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2587.317870] syz-executor.0: attempt to access beyond end of device
[ 2587.317870] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2587.318902] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2587.357194] syz-executor.3: attempt to access beyond end of device
[ 2587.357194] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2587.358241] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:29:50 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:50 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae772", 0x30, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:50 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2587.492917] loop7: detected capacity change from 0 to 40
[ 2587.527337] loop0: detected capacity change from 0 to 40
[ 2587.532896] syz-executor.1: attempt to access beyond end of device
[ 2587.532896] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2587.534426] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2587.540773] loop6: detected capacity change from 0 to 40
17:29:50 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2587.620087] syz-executor.5: attempt to access beyond end of device
[ 2587.620087] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2587.621988] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2587.692783] loop3: detected capacity change from 0 to 40
17:29:51 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:29:51 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2587.865945] loop1: detected capacity change from 0 to 40
[ 2587.973659] loop5: detected capacity change from 0 to 40
17:29:51 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2588.044068] syz-executor.0: attempt to access beyond end of device
[ 2588.044068] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2588.046099] Buffer I/O error on dev loop0, logical block 10, lost async page write
17:29:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2588.091015] syz-executor.6: attempt to access beyond end of device
[ 2588.091015] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2588.104038] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2588.146168] loop2: detected capacity change from 0 to 40
[ 2588.158019] FAT-fs (loop2): bogus number of reserved sectors
[ 2588.158711] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2588.162568] loop4: detected capacity change from 0 to 40
[ 2588.177530] FAT-fs (loop4): bogus number of FAT sectors
[ 2588.178155] FAT-fs (loop4): Can't find a valid FAT filesystem
17:29:51 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2588.241783] loop4: detected capacity change from 0 to 264192
[ 2588.285272] syz-executor.7: attempt to access beyond end of device
[ 2588.285272] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2588.287860] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2588.352161] loop0: detected capacity change from 0 to 40
17:29:51 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae772", 0x30, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2588.384715] syz-executor.3: attempt to access beyond end of device
[ 2588.384715] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2588.388062] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:29:51 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2588.534888] loop7: detected capacity change from 0 to 40
[ 2588.561337] loop6: detected capacity change from 0 to 40
17:29:52 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2588.831316] loop3: detected capacity change from 0 to 40
[ 2601.522886] loop6: detected capacity change from 0 to 40
17:30:04 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:04 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:04 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:04 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2601.546616] loop2: detected capacity change from 0 to 40
[ 2601.547110] loop4: detected capacity change from 0 to 40
[ 2601.550736] FAT-fs (loop2): bogus number of reserved sectors
[ 2601.551132] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2601.553813] loop1: detected capacity change from 0 to 40
[ 2601.557300] loop5: detected capacity change from 0 to 40
[ 2601.561343] loop3: detected capacity change from 0 to 40
[ 2601.587826] loop0: detected capacity change from 0 to 40
[ 2601.589076] FAT-fs (loop4): bogus number of FAT sectors
[ 2601.589915] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2601.640404] loop7: detected capacity change from 0 to 40
[ 2601.642835] loop4: detected capacity change from 0 to 264192
[ 2602.014665] bio_check_eod: 5 callbacks suppressed
[ 2602.014877] syz-executor.6: attempt to access beyond end of device
[ 2602.014877] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2602.016908] buffer_io_error: 5 callbacks suppressed
[ 2602.016926] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2602.050197] syz-executor.3: attempt to access beyond end of device
[ 2602.050197] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2602.052777] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2602.058947] syz-executor.1: attempt to access beyond end of device
[ 2602.058947] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2602.059946] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2602.149200] syz-executor.5: attempt to access beyond end of device
[ 2602.149200] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2602.150657] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2602.154879] syz-executor.7: attempt to access beyond end of device
[ 2602.154879] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2602.156892] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2602.159147] syz-executor.0: attempt to access beyond end of device
[ 2602.159147] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2602.160918] Buffer I/O error on dev loop0, logical block 10, lost async page write
17:30:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2602.282286] loop6: detected capacity change from 0 to 40
17:30:05 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2602.318129] loop1: detected capacity change from 0 to 40
[ 2602.333358] loop3: detected capacity change from 0 to 40
[ 2602.396657] loop0: detected capacity change from 0 to 40
[ 2602.400576] loop7: detected capacity change from 0 to 40
[ 2602.416501] loop5: detected capacity change from 0 to 40
17:30:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2602.563873] loop4: detected capacity change from 0 to 40
[ 2602.615189] loop2: detected capacity change from 0 to 40
[ 2602.638002] FAT-fs (loop2): bogus number of reserved sectors
[ 2602.638431] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2602.721870] syz-executor.0: attempt to access beyond end of device
[ 2602.721870] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2602.723549] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2602.745897] syz-executor.7: attempt to access beyond end of device
[ 2602.745897] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2602.747261] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2602.803140] syz-executor.4: attempt to access beyond end of device
[ 2602.803140] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2602.804246] Buffer I/O error on dev loop4, logical block 10, lost async page write
17:30:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:06 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2602.950653] syz-executor.6: attempt to access beyond end of device
[ 2602.950653] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2602.953203] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2602.958691] loop0: detected capacity change from 0 to 40
[ 2602.998413] loop7: detected capacity change from 0 to 40
[ 2603.027803] loop4: detected capacity change from 0 to 40
17:30:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae772", 0x30, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2617.023282] loop6: detected capacity change from 0 to 40
17:30:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:20 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2617.055979] loop7: detected capacity change from 0 to 40
[ 2617.056334] loop1: detected capacity change from 0 to 40
[ 2617.059366] loop4: detected capacity change from 0 to 40
[ 2617.070088] loop0: detected capacity change from 0 to 40
[ 2617.070906] loop3: detected capacity change from 0 to 40
[ 2617.075764] loop2: detected capacity change from 0 to 40
[ 2617.078440] FAT-fs (loop2): bogus number of reserved sectors
[ 2617.078872] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2617.127948] loop5: detected capacity change from 0 to 40
17:30:20 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2617.299033] loop7: detected capacity change from 0 to 40
[ 2617.374563] bio_check_eod: 4 callbacks suppressed
[ 2617.374585] syz-executor.4: attempt to access beyond end of device
[ 2617.374585] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2617.376403] buffer_io_error: 4 callbacks suppressed
[ 2617.376429] Buffer I/O error on dev loop4, logical block 10, lost async page write
17:30:20 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

17:30:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2617.543442] loop7: detected capacity change from 0 to 40
[ 2617.570963] syz-executor.0: attempt to access beyond end of device
[ 2617.570963] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2617.572013] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2617.588263] loop4: detected capacity change from 0 to 40
17:30:21 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 2617.680149] syz-executor.1: attempt to access beyond end of device
[ 2617.680149] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2617.683890] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2617.705956] loop7: detected capacity change from 0 to 40
[ 2617.717950] syz-executor.6: attempt to access beyond end of device
[ 2617.717950] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2617.719923] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2617.737907] syz-executor.5: attempt to access beyond end of device
[ 2617.737907] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2617.739886] Buffer I/O error on dev loop5, logical block 10, lost async page write
17:30:21 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a", 0x13, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2617.755443] syz-executor.3: attempt to access beyond end of device
[ 2617.755443] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2617.757067] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2617.777705] loop0: detected capacity change from 0 to 40
17:30:21 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae772", 0x30, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:21 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

17:30:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2617.951557] loop7: detected capacity change from 0 to 40
[ 2617.966373] loop5: detected capacity change from 0 to 40
[ 2618.036908] loop6: detected capacity change from 0 to 40
[ 2618.044387] loop1: detected capacity change from 0 to 40
[ 2618.276863] syz-executor.5: attempt to access beyond end of device
[ 2618.276863] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2618.278907] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2618.372182] syz-executor.1: attempt to access beyond end of device
[ 2618.372182] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2618.374662] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2618.385202] syz-executor.0: attempt to access beyond end of device
[ 2618.385202] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2618.388350] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2618.473083] syz-executor.6: attempt to access beyond end of device
[ 2618.473083] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2618.474852] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:30:38 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

17:30:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae772", 0x30, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:38 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a", 0x13, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:38 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a", 0x13, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2634.795621] loop7: detected capacity change from 0 to 40
[ 2634.796997] loop4: detected capacity change from 0 to 40
[ 2634.799740] loop0: detected capacity change from 0 to 40
17:30:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a", 0x13, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:38 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2634.810989] loop1: detected capacity change from 0 to 40
[ 2634.813795] loop3: detected capacity change from 0 to 40
[ 2634.822965] loop2: detected capacity change from 0 to 40
[ 2634.829897] loop5: detected capacity change from 0 to 40
[ 2634.855989] FAT-fs (loop2): bogus number of reserved sectors
[ 2634.857301] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2634.874972] loop6: detected capacity change from 0 to 40
[ 2635.124936] syz-executor.3: attempt to access beyond end of device
[ 2635.124936] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2635.126055] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2635.140291] syz-executor.0: attempt to access beyond end of device
[ 2635.140291] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2635.141478] Buffer I/O error on dev loop0, logical block 10, lost async page write
17:30:38 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 2635.261845] loop7: detected capacity change from 0 to 40
17:30:38 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a", 0x13, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:38 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a", 0x13, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2635.355406] loop0: detected capacity change from 0 to 40
[ 2635.356373] loop3: detected capacity change from 0 to 40
17:30:38 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 2635.457479] loop7: detected capacity change from 0 to 40
17:30:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:39 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2635.734774] loop7: detected capacity change from 0 to 40
[ 2635.794195] syz-executor.0: attempt to access beyond end of device
[ 2635.794195] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2635.798303] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2635.868697] loop4: detected capacity change from 0 to 40
[ 2635.903062] syz-executor.3: attempt to access beyond end of device
[ 2635.903062] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2635.904689] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:30:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a", 0x13, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:53 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2649.750287] loop4: detected capacity change from 0 to 40
17:30:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727f", 0x31, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:53 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a", 0x13, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:30:53 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b", 0x1c, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2649.759932] loop2: detected capacity change from 0 to 40
[ 2649.763599] FAT-fs (loop2): bogus number of reserved sectors
[ 2649.764010] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2649.781087] loop7: detected capacity change from 0 to 40
[ 2649.783184] loop6: detected capacity change from 0 to 40
[ 2649.833581] loop1: detected capacity change from 0 to 40
[ 2649.838556] loop3: detected capacity change from 0 to 40
[ 2649.847401] loop0: detected capacity change from 0 to 40
[ 2649.849367] loop5: detected capacity change from 0 to 40
[ 2649.961057] syz-executor.3: attempt to access beyond end of device
[ 2649.961057] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2649.962673] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2650.208238] syz-executor.0: attempt to access beyond end of device
[ 2650.208238] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2650.211150] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2650.269066] syz-executor.5: attempt to access beyond end of device
[ 2650.269066] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2650.270638] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2650.314914] syz-executor.1: attempt to access beyond end of device
[ 2650.314914] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2650.316508] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2650.576096] syz-executor.6: attempt to access beyond end of device
[ 2650.576096] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2650.577887] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:31:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:09 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727f", 0x31, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2666.125250] loop4: detected capacity change from 0 to 40
17:31:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b", 0x1c, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a", 0x13, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:09 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:09 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727f", 0x31, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2666.154671] loop5: detected capacity change from 0 to 40
[ 2666.166849] loop3: detected capacity change from 0 to 40
[ 2666.166941] loop0: detected capacity change from 0 to 40
[ 2666.170904] loop1: detected capacity change from 0 to 40
[ 2666.174198] loop2: detected capacity change from 0 to 40
[ 2666.176877] loop6: detected capacity change from 0 to 40
[ 2666.176995] loop7: detected capacity change from 0 to 40
[ 2666.193859] FAT-fs (loop2): bogus number of reserved sectors
[ 2666.194768] FAT-fs (loop2): Can't find a valid FAT filesystem
17:31:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b", 0x1c, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:10 executing program 7:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:10 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727f", 0x31, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b", 0x1c, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2667.223577] loop2: detected capacity change from 0 to 40
[ 2667.231566] loop1: detected capacity change from 0 to 40
[ 2667.238995] FAT-fs (loop2): bogus number of reserved sectors
[ 2667.239661] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2667.246745] loop4: detected capacity change from 0 to 40
[ 2667.251659] loop0: detected capacity change from 0 to 40
[ 2667.255800] loop5: detected capacity change from 0 to 40
17:31:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727f", 0x31, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2667.288424] loop7: detected capacity change from 0 to 16
[ 2667.303668] loop6: detected capacity change from 0 to 40
[ 2667.447894] loop3: detected capacity change from 0 to 40
[ 2667.870185] syz-executor.5: attempt to access beyond end of device
[ 2667.870185] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2667.871698] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2667.912124] syz-executor.0: attempt to access beyond end of device
[ 2667.912124] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2667.913694] Buffer I/O error on dev loop0, logical block 10, lost async page write
17:31:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b", 0x1c, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2667.957118] syz-executor.1: attempt to access beyond end of device
[ 2667.957118] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2667.958954] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2667.973624] syz-executor.6: attempt to access beyond end of device
[ 2667.973624] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2667.974904] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2668.028919] loop5: detected capacity change from 0 to 40
[ 2668.274885] syz-executor.3: attempt to access beyond end of device
[ 2668.274885] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2668.276853] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2668.344168] syz-executor.5: attempt to access beyond end of device
[ 2668.344168] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2668.346469] Buffer I/O error on dev loop5, logical block 10, lost async page write
17:31:25 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b", 0x1c, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551b", 0x21, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727f", 0x31, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:25 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:25 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:25 executing program 7:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2682.325067] loop2: detected capacity change from 0 to 40
[ 2682.328484] loop0: detected capacity change from 0 to 40
[ 2682.334152] loop5: detected capacity change from 0 to 40
[ 2682.334947] FAT-fs (loop2): invalid media value (0x00)
[ 2682.335770] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2682.339139] loop4: detected capacity change from 0 to 40
[ 2682.347006] loop3: detected capacity change from 0 to 40
[ 2682.348034] loop6: detected capacity change from 0 to 40
[ 2682.352361] loop7: detected capacity change from 0 to 16
[ 2682.352579] loop1: detected capacity change from 0 to 40
17:31:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2682.656089] loop4: detected capacity change from 0 to 40
[ 2682.937583] syz-executor.1: attempt to access beyond end of device
[ 2682.937583] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2682.939964] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:31:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2683.094029] loop4: detected capacity change from 0 to 40
[ 2683.140706] syz-executor.0: attempt to access beyond end of device
[ 2683.140706] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2683.142864] Buffer I/O error on dev loop0, logical block 10, lost async page write
17:31:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551b", 0x21, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2683.288128] loop1: detected capacity change from 0 to 40
17:31:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:26 executing program 7:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551b", 0x21, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2683.382630] loop2: detected capacity change from 0 to 40
[ 2683.383869] loop5: detected capacity change from 0 to 40
[ 2683.406474] loop7: detected capacity change from 0 to 16
[ 2683.413020] FAT-fs (loop2): invalid media value (0x00)
[ 2683.413684] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2683.418128] loop6: detected capacity change from 0 to 40
[ 2683.432590] loop4: detected capacity change from 0 to 40
[ 2683.454729] loop0: detected capacity change from 0 to 40
17:31:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551b", 0x21, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2683.553495] loop3: detected capacity change from 0 to 40
17:31:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2683.659020] loop4: detected capacity change from 0 to 40
17:31:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2683.909742] loop4: detected capacity change from 0 to 40
[ 2683.981997] syz-executor.1: attempt to access beyond end of device
[ 2683.981997] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2683.983978] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:31:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2683.996951] syz-executor.0: attempt to access beyond end of device
[ 2683.996951] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2683.998942] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2684.050955] syz-executor.3: attempt to access beyond end of device
[ 2684.050955] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2684.052169] syz-executor.6: attempt to access beyond end of device
[ 2684.052169] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2684.052273] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2684.053839] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2684.059676] loop4: detected capacity change from 0 to 40
17:31:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2684.103182] syz-executor.5: attempt to access beyond end of device
[ 2684.103182] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2684.105872] Buffer I/O error on dev loop5, logical block 10, lost async page write
17:31:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b", 0x1c, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551b", 0x21, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:27 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551b", 0x21, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2684.205552] loop1: detected capacity change from 0 to 40
17:31:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2684.223541] loop3: detected capacity change from 0 to 40
[ 2684.227986] loop0: detected capacity change from 0 to 40
[ 2684.250164] loop6: detected capacity change from 0 to 40
[ 2684.261771] loop5: detected capacity change from 0 to 40
[ 2684.287697] loop4: detected capacity change from 0 to 40
[ 2684.442758] syz-executor.0: attempt to access beyond end of device
[ 2684.442758] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2684.444384] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2684.503014] syz-executor.5: attempt to access beyond end of device
[ 2684.503014] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2684.504177] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2684.535863] syz-executor.1: attempt to access beyond end of device
[ 2684.535863] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2684.536872] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:31:42 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:42 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2699.421038] loop7: detected capacity change from 0 to 40
17:31:42 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:42 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb085", 0x23, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:42 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551b", 0x21, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:42 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:42 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2699.449951] loop3: detected capacity change from 0 to 40
[ 2699.452187] loop5: detected capacity change from 0 to 40
[ 2699.460492] loop2: detected capacity change from 0 to 40
[ 2699.470830] loop0: detected capacity change from 0 to 40
[ 2699.476332] FAT-fs (loop2): invalid media value (0x00)
[ 2699.477084] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2699.489717] loop4: detected capacity change from 0 to 40
[ 2699.501816] loop1: detected capacity change from 0 to 40
[ 2699.506861] loop6: detected capacity change from 0 to 40
17:31:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2699.752009] loop4: detected capacity change from 0 to 40
[ 2699.910584] bio_check_eod: 2 callbacks suppressed
[ 2699.910652] syz-executor.5: attempt to access beyond end of device
[ 2699.910652] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2699.914145] buffer_io_error: 2 callbacks suppressed
[ 2699.914163] Buffer I/O error on dev loop5, logical block 10, lost async page write
17:31:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2699.988101] syz-executor.3: attempt to access beyond end of device
[ 2699.988101] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2699.990991] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2700.024451] syz-executor.0: attempt to access beyond end of device
[ 2700.024451] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2700.028117] Buffer I/O error on dev loop0, logical block 10, lost async page write
17:31:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb085", 0x23, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2700.154260] loop4: detected capacity change from 0 to 40
17:31:43 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb085", 0x23, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2700.240453] loop5: detected capacity change from 0 to 40
[ 2700.324853] syz-executor.1: attempt to access beyond end of device
[ 2700.324853] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2700.326392] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2700.335894] loop0: detected capacity change from 0 to 40
[ 2700.690146] syz-executor.0: attempt to access beyond end of device
[ 2700.690146] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2700.692681] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2700.819158] syz-executor.5: attempt to access beyond end of device
[ 2700.819158] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2700.820881] Buffer I/O error on dev loop5, logical block 10, lost async page write
17:31:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:56 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb085", 0x23, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb085", 0x23, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:56 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2713.106014] loop2: detected capacity change from 0 to 40
[ 2713.112583] loop0: detected capacity change from 0 to 40
[ 2713.115638] loop7: detected capacity change from 0 to 40
[ 2713.117827] loop3: detected capacity change from 0 to 40
[ 2713.119691] loop5: detected capacity change from 0 to 40
[ 2713.130966] FAT-fs (loop2): invalid media value (0x00)
[ 2713.131442] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2713.134035] loop6: detected capacity change from 0 to 40
[ 2713.149076] loop1: detected capacity change from 0 to 40
[ 2713.184299] loop4: detected capacity change from 0 to 40
[ 2713.380937] syz-executor.3: attempt to access beyond end of device
[ 2713.380937] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2713.382875] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:31:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb085", 0x23, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2713.587969] loop3: detected capacity change from 0 to 40
[ 2713.690865] loop4: detected capacity change from 0 to 40
17:31:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:31:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502", 0x24, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2714.092272] loop0: detected capacity change from 0 to 40
[ 2714.116606] loop4: detected capacity change from 0 to 40
[ 2714.274944] syz-executor.0: attempt to access beyond end of device
[ 2714.274944] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2714.276113] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2714.315148] syz-executor.3: attempt to access beyond end of device
[ 2714.315148] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2714.317685] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:32:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502", 0x24, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502", 0x24, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:10 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb085", 0x23, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2727.058981] loop1: detected capacity change from 0 to 40
17:32:10 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2727.071684] loop5: detected capacity change from 0 to 40
[ 2727.072805] loop6: detected capacity change from 0 to 40
[ 2727.077106] loop7: detected capacity change from 0 to 40
[ 2727.080899] loop0: detected capacity change from 0 to 40
[ 2727.082518] loop2: detected capacity change from 0 to 40
[ 2727.090042] loop4: detected capacity change from 0 to 40
[ 2727.095581] FAT-fs (loop2): invalid media value (0x00)
[ 2727.096148] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2727.099563] loop3: detected capacity change from 0 to 40
17:32:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2727.504929] loop4: detected capacity change from 0 to 40
[ 2727.590127] syz-executor.6: attempt to access beyond end of device
[ 2727.590127] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2727.592001] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2727.607153] syz-executor.1: attempt to access beyond end of device
[ 2727.607153] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2727.609864] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:32:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2727.805842] loop1: detected capacity change from 0 to 40
[ 2727.831101] loop4: detected capacity change from 0 to 40
[ 2727.864775] loop6: detected capacity change from 0 to 40
17:32:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:11 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:11 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502", 0x24, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502", 0x24, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2728.116906] loop2: detected capacity change from 0 to 40
[ 2728.121677] loop7: detected capacity change from 0 to 40
17:32:11 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502", 0x24, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2728.132140] FAT-fs (loop2): invalid media value (0x00)
[ 2728.132709] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2728.156008] loop7: detected capacity change from 0 to 16
[ 2728.167082] loop4: detected capacity change from 0 to 40
[ 2728.188931] loop0: detected capacity change from 0 to 40
[ 2728.214811] loop5: detected capacity change from 0 to 40
[ 2728.372995] loop3: detected capacity change from 0 to 40
17:32:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2728.642869] syz-executor.1: attempt to access beyond end of device
[ 2728.642869] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2728.644683] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2728.664812] loop4: detected capacity change from 0 to 40
[ 2729.085055] syz-executor.3: attempt to access beyond end of device
[ 2729.085055] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2729.086977] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2729.191001] syz-executor.4: attempt to access beyond end of device
[ 2729.191001] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2729.192930] Buffer I/O error on dev loop4, logical block 10, lost async page write
17:32:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502", 0x24, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:27 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502", 0x24, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:27 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2744.668634] loop3: detected capacity change from 0 to 40
[ 2744.676147] loop7: detected capacity change from 0 to 40
[ 2744.681263] loop4: detected capacity change from 0 to 40
[ 2744.683683] loop6: detected capacity change from 0 to 40
[ 2744.685961] loop5: detected capacity change from 0 to 40
[ 2744.691116] loop1: detected capacity change from 0 to 40
[ 2744.693646] loop0: detected capacity change from 0 to 40
[ 2744.696349] loop2: detected capacity change from 0 to 40
[ 2744.702026] FAT-fs (loop2): bogus number of FAT sectors
[ 2744.702844] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2744.731038] loop7: detected capacity change from 0 to 16
[ 2745.457020] syz-executor.1: attempt to access beyond end of device
[ 2745.457020] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2745.459258] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:32:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502", 0x24, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:41 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502", 0x24, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:41 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:41 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2757.839097] loop6: detected capacity change from 0 to 40
[ 2757.840033] loop7: detected capacity change from 0 to 40
[ 2757.853372] loop4: detected capacity change from 0 to 40
[ 2757.857917] loop1: detected capacity change from 0 to 40
[ 2757.863043] loop5: detected capacity change from 0 to 40
[ 2757.869563] loop7: detected capacity change from 0 to 16
[ 2757.915370] loop3: detected capacity change from 0 to 40
[ 2757.918353] loop0: detected capacity change from 0 to 40
[ 2757.919996] loop2: detected capacity change from 0 to 40
[ 2757.956717] FAT-fs (loop2): bogus number of FAT sectors
[ 2757.957485] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2758.087469] syz-executor.6: attempt to access beyond end of device
[ 2758.087469] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2758.089089] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:32:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300), 0x0, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2758.332489] loop6: detected capacity change from 0 to 40
[ 2758.547169] syz-executor.4: attempt to access beyond end of device
[ 2758.547169] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2758.550021] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2758.606980] syz-executor.3: attempt to access beyond end of device
[ 2758.606980] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2758.609003] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2758.657537] syz-executor.5: attempt to access beyond end of device
[ 2758.657537] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2758.660029] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2758.676892] syz-executor.1: attempt to access beyond end of device
[ 2758.676892] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2758.678630] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2758.695977] syz-executor.6: attempt to access beyond end of device
[ 2758.695977] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2758.697873] Buffer I/O error on dev loop6, logical block 10, lost async page write
17:32:42 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:42 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300), 0x0, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:42 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:42 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502", 0x24, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:42 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2758.854810] loop1: detected capacity change from 0 to 40
[ 2758.860142] loop2: detected capacity change from 0 to 40
[ 2758.863648] FAT-fs (loop2): bogus number of FAT sectors
[ 2758.864052] FAT-fs (loop2): Can't find a valid FAT filesystem
17:32:42 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2758.874891] loop4: detected capacity change from 0 to 40
17:32:42 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2758.930518] loop6: detected capacity change from 0 to 40
[ 2758.968909] loop3: detected capacity change from 0 to 40
[ 2759.028084] loop5: detected capacity change from 0 to 40
[ 2759.043729] loop7: detected capacity change from 0 to 16
[ 2759.064541] loop0: detected capacity change from 0 to 40
[ 2759.098155] syz-executor.1: attempt to access beyond end of device
[ 2759.098155] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2759.100933] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:32:42 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2759.221597] loop1: detected capacity change from 0 to 40
[ 2759.380979] syz-executor.4: attempt to access beyond end of device
[ 2759.380979] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2759.382872] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2759.497676] syz-executor.1: attempt to access beyond end of device
[ 2759.497676] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2759.499897] Buffer I/O error on dev loop1, logical block 10, lost async page write
17:32:42 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b5", 0x25, 0x4}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_lower}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:43 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502b57c80fb180304694bcffcc2d26210", 0x33}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2759.685425] loop1: detected capacity change from 0 to 40
[ 2759.721759] loop4: detected capacity change from 0 to 40
[ 2759.744968] syz-executor.3: attempt to access beyond end of device
[ 2759.744968] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2759.746578] Buffer I/O error on dev loop3, logical block 10, lost async page write
17:32:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

17:32:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="e961fea13c0c4792dba2cc91c0c64456802630e522348d1092cc1f33c57140eebac13980c4eb62f51b33a9e0faeee3085af8ddfc7060748eea813f54aac99ef707b6a810e195be23aa52b1af162d59151029d7c2b2fd4d7364bf9e764aca61d342d14f6a46d039d5f45fdc8649bec5b9eb6f2cfdac6f466e9116c816599f94bca7", 0x81, 0x1000}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="f22b2b4cffdf2143117bb8a8dc53eec6594d2a34903298b24f99115b22adfb551bb08502", 0x24, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2759.884780] loop3: detected capacity change from 0 to 40
17:32:43 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_mount_image$vfat(0x0, 0x0, 0x80000001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300), 0x0, 0x1000}, {&(0x7f0000000180)="2d170499622bbec54f7a317faf87525a00412c5c7e029315a5f055d6be5c3f346cbb931b7474e793aa6aa9776edae7727fc3", 0x32, 0x1}, {&(0x7f00000003c0), 0x0, 0x4}], 0x6002, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_lower}, {@utf8no}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, '\'+(/'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2760.035062] loop2: detected capacity change from 0 to 40
[ 2760.072076] loop6: detected capacity change from 0 to 40
[ 2760.858377] ==================================================================
[ 2760.859451] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70
[ 2760.860403] Read of size 8 at addr ffff88803e3d0d98 by task syz-executor/16741
[ 2760.861415] 
[ 2760.861667] CPU: 0 PID: 16741 Comm: syz-executor Not tainted 6.1.0-rc5-next-20221121 #1
[ 2760.862777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2760.863919] Call Trace:
[ 2760.864289]  <TASK>
[ 2760.864620]  dump_stack_lvl+0x8f/0xb7
[ 2760.865183]  print_report+0x175/0x478
[ 2760.865752]  ? __lock_acquire+0x42c9/0x5e70
[ 2760.866375]  kasan_report+0xbf/0x1c0
[ 2760.866922]  ? __lock_acquire+0x42c9/0x5e70
[ 2760.867574]  __lock_acquire+0x42c9/0x5e70
[ 2760.868180]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 2760.868858]  ? finish_task_switch.isra.0+0x22d/0x8a0
[ 2760.869582]  ? __pfx___lock_acquire+0x10/0x10
[ 2760.872441]  ? __switch_to+0x5c3/0xf30
[ 2760.874364]  lock_acquire+0x1a6/0x530
[ 2760.874916]  ? kmemleak_scan+0x1a0/0x1600
[ 2760.875522]  ? __pfx_lock_acquire+0x10/0x10
[ 2760.876132]  ? __call_rcu_common.constprop.0+0x589/0xa40
[ 2760.876894]  ? __call_rcu_common.constprop.0+0x589/0xa40
[ 2760.877665]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2760.878347]  ? _raw_spin_lock_irq+0x45/0x50
[ 2760.878990]  _raw_spin_lock_irq+0x36/0x50
[ 2760.879622]  ? kmemleak_scan+0x1a0/0x1600
[ 2760.880228]  kmemleak_scan+0x1a0/0x1600
[ 2760.880807]  ? __pfx_kmemleak_scan+0x10/0x10
[ 2760.881463]  ? strncpy_from_user+0x107/0x500
[ 2760.882124]  kmemleak_write+0x574/0x680
[ 2760.882711]  ? __pfx_kmemleak_write+0x10/0x10
[ 2760.883384]  ? debugfs_file_get+0x1d2/0x450
[ 2760.884025]  ? __pfx_debugfs_file_get+0x10/0x10
[ 2760.884705]  full_proxy_write+0x121/0x190
[ 2760.885315]  vfs_write+0x358/0xe40
[ 2760.885858]  ? __pfx_full_proxy_write+0x10/0x10
[ 2760.886550]  ? __pfx_vfs_write+0x10/0x10
[ 2760.887163]  ? lock_release+0x3b6/0x750
[ 2760.887774]  ? __up_read+0x192/0x730
[ 2760.888340]  ? handle_mm_fault+0x43d/0xae0
[ 2760.888976]  ? __pfx___up_read+0x10/0x10
[ 2760.889587]  ? __fget_light+0x212/0x280
[ 2760.890195]  ksys_write+0x12b/0x260
[ 2760.890754]  ? __pfx_ksys_write+0x10/0x10
[ 2760.891373]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2760.892138]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2760.892888]  do_syscall_64+0x3f/0x90
[ 2760.893448]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2760.894202] RIP: 0033:0x7fabd6d965c3
[ 2760.894741] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18
[ 2760.897303] RSP: 002b:00007ffc1bad7258 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2760.898390] RAX: ffffffffffffffda RBX: 00007ffc1bad7898 RCX: 00007fabd6d965c3
[ 2760.899409] RDX: 0000000000000004 RSI: 00007fabd6e4ced9 RDI: 0000000000000003
[ 2760.900426] RBP: 0000000000000002 R08: 0000000000000ac8 R09: 00007ffc1bb64080
[ 2760.901431] R10: 00007ffc1bb64090 R11: 0000000000000246 R12: 00000000fffffff6
[ 2760.902450] R13: 00007ffc1bad8ef1 R14: 0000000000000000 R15: 00000000002a1e00
[ 2760.903485]  </TASK>
[ 2760.903829] 
[ 2760.904082] Allocated by task 16707:
[ 2760.904613]  kasan_save_stack+0x22/0x50
[ 2760.905217]  kasan_set_track+0x25/0x30
[ 2760.905789]  __kasan_slab_alloc+0x5c/0x70
[ 2760.906392]  kmem_cache_alloc+0x1e0/0x410
[ 2760.907011]  __create_object+0x3d/0xc10
[ 2760.907609]  kmem_cache_alloc_lru+0x307/0x760
[ 2760.908276]  __d_alloc+0x31/0x9c0
[ 2760.908791]  d_alloc_parallel+0x10e/0x1530
[ 2760.909412]  lookup_open.isra.0+0x914/0x1250
[ 2760.910073]  path_openat+0x946/0x29b0
[ 2760.910633]  do_filp_open+0x1ba/0x410
[ 2760.911192]  do_sys_openat2+0x171/0x4c0
[ 2760.911806]  __x64_sys_openat+0x143/0x200
[ 2760.912428]  do_syscall_64+0x3f/0x90
[ 2760.912986]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2760.913744] 
[ 2760.914000] Freed by task 19:
[ 2760.914456]  kasan_save_stack+0x22/0x50
[ 2760.915053]  kasan_set_track+0x25/0x30
[ 2760.915638]  kasan_save_free_info+0x2e/0x50
[ 2760.916277]  __kasan_slab_free+0x10a/0x190
[ 2760.916896]  kmem_cache_free+0xfb/0x610
[ 2760.917488]  rcu_core+0x7cf/0x2070
[ 2760.918029]  __do_softirq+0x1c7/0x8f9
[ 2760.918598] 
[ 2760.918853] Last potentially related work creation:
[ 2760.919560]  kasan_save_stack+0x22/0x50
[ 2760.920160]  __kasan_record_aux_stack+0x95/0xb0
[ 2760.920850]  __call_rcu_common.constprop.0+0x6a/0xa40
[ 2760.921607]  kmem_cache_free+0xc1/0x610
[ 2760.922205]  rcu_core+0x7cf/0x2070
[ 2760.922749]  __do_softirq+0x1c7/0x8f9
[ 2760.923330] 
[ 2760.923599] Second to last potentially related work creation:
[ 2760.924414]  kasan_save_stack+0x22/0x50
[ 2760.925016]  __kasan_record_aux_stack+0x95/0xb0
[ 2760.925705]  __call_rcu_common.constprop.0+0x6a/0xa40
[ 2760.926449]  __kmem_cache_free+0x95/0x410
[ 2760.927077]  __vunmap+0x9b5/0xbf0
[ 2760.927610]  __vfree+0x3c/0xd0
[ 2760.928088]  vfree+0x66/0xa0
[ 2760.928548]  do_ipt_get_ctl+0x78f/0x950
[ 2760.929130]  nf_getsockopt+0x7c/0xd0
[ 2760.929689]  ip_getsockopt+0x211/0x340
[ 2760.930278]  tcp_getsockopt+0xa3/0x110
[ 2760.930849]  __sys_getsockopt+0x150/0x250
[ 2760.931493]  __x64_sys_getsockopt+0xbe/0x160
[ 2760.932151]  do_syscall_64+0x3f/0x90
[ 2760.932709]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2760.933449] 
[ 2760.933701] The buggy address belongs to the object at ffff88803e3d0d80
[ 2760.933701]  which belongs to the cache kmemleak_object of size 368
[ 2760.935473] The buggy address is located 24 bytes inside of
[ 2760.935473]  368-byte region [ffff88803e3d0d80, ffff88803e3d0ef0)
[ 2760.937085] 
[ 2760.937340] The buggy address belongs to the physical page:
[ 2760.938132] page:000000006de13aab refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3e3d0
[ 2760.939418] head:000000006de13aab order:1 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0
[ 2760.940718] flags: 0x100000000010200(slab|head|node=0|zone=1)
[ 2760.941577] raw: 0100000000010200 ffff88800844f780 dead000000000100 dead000000000122
[ 2760.942676] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000
[ 2760.943769] page dumped because: kasan: bad access detected
[ 2760.944564] 
[ 2760.944813] Memory state around the buggy address:
[ 2760.945511]  ffff88803e3d0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2760.946537]  ffff88803e3d0d00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 2760.947580] >ffff88803e3d0d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2760.948602]                             ^
[ 2760.949210]  ffff88803e3d0e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2760.950221]  ffff88803e3d0e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[ 2760.951227] ==================================================================
[ 2760.952250] Disabling lock debugging due to kernel taint

VM DIAGNOSIS:
17:32:44  Registers:
info registers vcpu 0
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff8247aa40 RDI=ffffffff87fbbb20 RBP=ffffffff87fbbae0 RSP=ffff8880470df1b0
R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000002 R11=0000000000000001
R12=0000000000002710 R13=0000000000000060 R14=fffffbfff0ff77b4 R15=dffffc0000000000
RIP=ffffffff8247aa95 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555562eb400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe4764547000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe4764545000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3c0a870ae0 CR3=0000000044288000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00ff00000000ff00000000ff000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffffffffffff0000ffffffff0000ff00
XMM06=000000000000174c000000006801000a XMM07=00000000000000000000000000000000
XMM08=622f617461642f766564752f6e75722f XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88802122d040
RSI=0000000000000102 RDI=ffffffff849bac80 RBP=ffff888016234590 RSP=ffff8880476e7868
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff8880164e6d00 R13=0000000000000000 R14=1ffff11008edcf16 R15=0000000000000000
RIP=ffffffff812201a0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f3c0a4588c0 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe10d6bcc000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe10d6bca000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f1f2cb8000 CR3=0000000018b88000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM01=ffffffffffffffffffff000000000000
XMM02=ffffffffffffffffffff000000000000 XMM03=696e656420737365636341002f737973
XMM04=000055f1f2c99ca0000055f1f2cb1230 XMM05=00000000000000000000000000000000
XMM06=000055f1f2cc83200000000800000000 XMM07=00000000000000000000000000000000
XMM08=000000000000000000007ffc41668370 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000