, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2539.556439] loop7: detected capacity change from 0 to 40
20:39:09 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:39:09 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:39:09 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:39:09 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:39:09 executing program 1:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2539.560221] loop6: detected capacity change from 0 to 40
[ 2539.562697] loop1: detected capacity change from 0 to 40
[ 2539.581420] loop0: detected capacity change from 0 to 40
[ 2539.583549] FAT-fs (loop5): bogus number of reserved sectors
[ 2539.583845] loop4: detected capacity change from 0 to 40
[ 2539.585364] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2539.595033] loop3: detected capacity change from 0 to 40
[ 2539.771683] syz-executor.6: attempt to access beyond end of device
[ 2539.771683] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2539.772975] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2539.826198] syz-executor.7: attempt to access beyond end of device
[ 2539.826198] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2539.827291] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2539.840219] syz-executor.0: attempt to access beyond end of device
[ 2539.840219] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2539.841758] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2539.870445] syz-executor.4: attempt to access beyond end of device
[ 2539.870445] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2539.872163] Buffer I/O error on dev loop4, logical block 10, lost async page write
20:39:09 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

20:39:10 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2539.930974] syz-executor.3: attempt to access beyond end of device
[ 2539.930974] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2539.931171] loop0: detected capacity change from 0 to 40
[ 2539.932752] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2540.011966] loop6: detected capacity change from 0 to 40
20:39:10 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:39:10 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:39:10 executing program 7:
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2540.114290] syz-executor.6: attempt to access beyond end of device
[ 2540.114290] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2540.115295] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2540.180114] loop3: detected capacity change from 0 to 40
[ 2540.190222] syz-executor.0: attempt to access beyond end of device
[ 2540.190222] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2540.192110] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2540.208316] loop4: detected capacity change from 0 to 40
[ 2540.268547] syz-executor.4: attempt to access beyond end of device
[ 2540.268547] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2540.269790] Buffer I/O error on dev loop4, logical block 10, lost async page write
20:39:10 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

20:39:10 executing program 0:
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2540.416836] loop6: detected capacity change from 0 to 40
20:39:10 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2540.451556] syz-executor.6: attempt to access beyond end of device
[ 2540.451556] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2540.452405] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2540.529976] syz-executor.3: attempt to access beyond end of device
[ 2540.529976] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2540.531993] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2540.536045] loop4: detected capacity change from 0 to 40
20:39:10 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:39:10 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:39:10 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

20:39:10 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2540.597232] loop6: detected capacity change from 0 to 40
20:39:10 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2540.790845] FAT-fs (loop5): bogus number of reserved sectors
[ 2540.791606] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2540.802831] loop1: detected capacity change from 0 to 40
[ 2540.821803] loop4: detected capacity change from 0 to 40
20:39:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r0, 0x0, 0xfffffdef)

20:39:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2541.004391] loop3: detected capacity change from 0 to 40
20:39:11 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2541.097026] loop6: detected capacity change from 0 to 40
20:39:11 executing program 1:
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2541.239179] loop4: detected capacity change from 0 to 40
20:39:27 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:39:27 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

20:39:27 executing program 2:
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r1, r0, 0x0, 0xfffffdef)

20:39:27 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:39:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

20:39:27 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:39:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r0, 0x0, 0xfffffdef)

20:39:27 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2557.242422] loop4: detected capacity change from 0 to 40
[ 2557.246817] loop5: detected capacity change from 0 to 40
[ 2557.249805] loop0: detected capacity change from 0 to 40
[ 2557.253643] loop3: detected capacity change from 0 to 40
[ 2557.254091] loop7: detected capacity change from 0 to 40
[ 2557.256857] FAT-fs (loop5): bogus number of reserved sectors
[ 2557.257314] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2557.260193] loop1: detected capacity change from 0 to 40
[ 2557.263723] loop6: detected capacity change from 0 to 40
[ 2557.391276] bio_check_eod: 7 callbacks suppressed
[ 2557.391290] syz-executor.6: attempt to access beyond end of device
[ 2557.391290] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2557.392549] buffer_io_error: 7 callbacks suppressed
[ 2557.392558] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2557.437148] syz-executor.0: attempt to access beyond end of device
[ 2557.437148] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2557.438214] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2557.446231] syz-executor.3: attempt to access beyond end of device
[ 2557.446231] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2557.447390] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2557.452193] syz-executor.4: attempt to access beyond end of device
[ 2557.452193] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2557.453744] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2557.598792] syz-executor.1: attempt to access beyond end of device
[ 2557.598792] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2557.599836] Buffer I/O error on dev loop1, logical block 10, lost async page write
20:39:44 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:39:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2574.240341] loop6: detected capacity change from 0 to 40
[ 2574.246939] loop0: detected capacity change from 0 to 40
20:39:44 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

20:39:44 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:39:44 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2574.256785] loop7: detected capacity change from 0 to 40
[ 2574.257817] loop1: detected capacity change from 0 to 40
[ 2574.269971] loop3: detected capacity change from 0 to 40
20:39:44 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:39:44 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:39:44 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2574.296765] loop4: detected capacity change from 0 to 40
[ 2574.304325] loop5: detected capacity change from 0 to 40
[ 2574.314760] FAT-fs (loop5): bogus number of reserved sectors
[ 2574.315177] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2574.409003] syz-executor.0: attempt to access beyond end of device
[ 2574.409003] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2574.410701] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2574.469423] syz-executor.1: attempt to access beyond end of device
[ 2574.469423] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2574.471617] Buffer I/O error on dev loop1, logical block 10, lost async page write
20:39:44 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2574.596853] syz-executor.6: attempt to access beyond end of device
[ 2574.596853] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2574.598698] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2574.638031] syz-executor.3: attempt to access beyond end of device
[ 2574.638031] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2574.640060] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:39:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2574.770009] syz-executor.4: attempt to access beyond end of device
[ 2574.770009] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2574.771862] Buffer I/O error on dev loop4, logical block 10, lost async page write
20:39:44 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2574.800225] loop0: detected capacity change from 0 to 40
20:39:44 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2574.915536] loop1: detected capacity change from 0 to 40
[ 2574.976273] loop3: detected capacity change from 0 to 40
[ 2575.032076] loop6: detected capacity change from 0 to 40
20:39:45 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2575.074901] syz-executor.1: attempt to access beyond end of device
[ 2575.074901] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2575.076330] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2575.139158] syz-executor.3: attempt to access beyond end of device
[ 2575.139158] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2575.140711] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2575.185091] syz-executor.0: attempt to access beyond end of device
[ 2575.185091] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2575.187218] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:39:45 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2575.263325] loop4: detected capacity change from 0 to 40
20:39:45 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2575.293592] loop1: detected capacity change from 0 to 40
[ 2575.334778] syz-executor.6: attempt to access beyond end of device
[ 2575.334778] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2575.336009] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2575.404878] loop5: detected capacity change from 0 to 40
[ 2575.415440] syz-executor.1: attempt to access beyond end of device
[ 2575.415440] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2575.417211] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2575.418284] FAT-fs (loop5): bogus number of reserved sectors
[ 2575.418908] FAT-fs (loop5): Can't find a valid FAT filesystem
20:39:59 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2589.429529] loop3: detected capacity change from 0 to 40
20:39:59 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:39:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2589.438112] loop5: detected capacity change from 0 to 40
20:39:59 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2589.448782] FAT-fs (loop5): bogus number of reserved sectors
[ 2589.450238] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2589.459983] loop4: detected capacity change from 0 to 40
20:39:59 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:39:59 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:39:59 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2589.494185] loop7: detected capacity change from 0 to 40
[ 2589.571307] loop0: detected capacity change from 0 to 40
20:39:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2589.640152] loop6: detected capacity change from 0 to 40
[ 2589.642679] loop1: detected capacity change from 0 to 40
[ 2589.766024] bio_check_eod: 1 callbacks suppressed
[ 2589.766052] syz-executor.4: attempt to access beyond end of device
[ 2589.766052] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2589.769761] buffer_io_error: 1 callbacks suppressed
[ 2589.769781] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2589.774304] syz-executor.6: attempt to access beyond end of device
[ 2589.774304] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2589.776149] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2589.800048] syz-executor.0: attempt to access beyond end of device
[ 2589.800048] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2589.802097] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2589.868321] syz-executor.7: attempt to access beyond end of device
[ 2589.868321] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2589.869346] Buffer I/O error on dev loop7, logical block 10, lost async page write
20:39:59 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2589.989699] loop4: detected capacity change from 0 to 40
20:40:00 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:40:00 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2590.095354] loop6: detected capacity change from 0 to 40
[ 2590.186152] loop0: detected capacity change from 0 to 40
[ 2590.230607] syz-executor.6: attempt to access beyond end of device
[ 2590.230607] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2590.232584] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2590.249149] loop7: detected capacity change from 0 to 40
[ 2590.407957] syz-executor.4: attempt to access beyond end of device
[ 2590.407957] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2590.410116] Buffer I/O error on dev loop4, logical block 10, lost async page write
20:40:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 2590.461291] syz-executor.0: attempt to access beyond end of device
[ 2590.461291] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2590.463997] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:40:00 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2590.554902] syz-executor.7: attempt to access beyond end of device
[ 2590.554902] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2590.557005] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2590.578419] loop5: detected capacity change from 0 to 40
[ 2590.637527] FAT-fs (loop5): bogus number of reserved sectors
[ 2590.638368] FAT-fs (loop5): Can't find a valid FAT filesystem
20:40:00 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2590.658041] loop6: detected capacity change from 0 to 40
20:40:00 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2590.728996] loop4: detected capacity change from 0 to 40
20:40:00 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2590.770816] FAT-fs (loop4): bogus number of reserved sectors
[ 2590.772021] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2590.775385] loop3: detected capacity change from 0 to 40
20:40:00 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:40:00 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:00 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2590.840055] loop7: detected capacity change from 0 to 40
[ 2590.846065] loop0: detected capacity change from 0 to 40
[ 2590.942085] syz-executor.0: attempt to access beyond end of device
[ 2590.942085] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2590.944215] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2591.030271] loop1: detected capacity change from 0 to 40
[ 2591.055062] syz-executor.3: attempt to access beyond end of device
[ 2591.055062] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2591.056751] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:40:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2604.168374] loop3: detected capacity change from 0 to 40
20:40:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

20:40:14 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:14 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:40:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2604.179540] loop7: detected capacity change from 0 to 40
20:40:14 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:14 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:14 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2604.258045] bio_check_eod: 2 callbacks suppressed
[ 2604.258062] syz-executor.3: attempt to access beyond end of device
[ 2604.258062] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2604.259834] buffer_io_error: 2 callbacks suppressed
[ 2604.259844] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2604.261934] syz-executor.7: attempt to access beyond end of device
[ 2604.261934] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2604.262946] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2604.265022] loop4: detected capacity change from 0 to 40
[ 2604.268265] loop0: detected capacity change from 0 to 40
[ 2604.270110] loop6: detected capacity change from 0 to 40
[ 2604.271995] loop5: detected capacity change from 0 to 40
[ 2604.289335] FAT-fs (loop5): bogus number of reserved sectors
[ 2604.290343] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2604.294690] loop1: detected capacity change from 0 to 40
20:40:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r1, r0, 0x0, 0xfffffdef)

20:40:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

20:40:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 2604.560276] loop3: detected capacity change from 0 to 40
[ 2604.562539] loop7: detected capacity change from 0 to 40
20:40:14 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2604.624069] syz-executor.0: attempt to access beyond end of device
[ 2604.624069] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2604.625343] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2604.629989] syz-executor.4: attempt to access beyond end of device
[ 2604.629989] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2604.632071] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2604.696098] loop6: detected capacity change from 0 to 40
20:40:14 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2604.780194] loop1: detected capacity change from 0 to 40
[ 2604.793075] syz-executor.3: attempt to access beyond end of device
[ 2604.793075] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2604.794690] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:40:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2604.867120] syz-executor.7: attempt to access beyond end of device
[ 2604.867120] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2604.868795] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2604.971304] loop0: detected capacity change from 0 to 40
[ 2604.979570] loop4: detected capacity change from 0 to 40
20:40:15 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 2605.055977] syz-executor.1: attempt to access beyond end of device
[ 2605.055977] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2605.057762] Buffer I/O error on dev loop1, logical block 10, lost async page write
20:40:15 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2605.180558] loop6: detected capacity change from 0 to 40
[ 2605.243226] syz-executor.0: attempt to access beyond end of device
[ 2605.243226] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2605.244819] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2605.249033] loop3: detected capacity change from 0 to 40
[ 2605.253081] syz-executor.4: attempt to access beyond end of device
[ 2605.253081] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2605.254692] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2605.399731] syz-executor.3: attempt to access beyond end of device
[ 2605.399731] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2605.401162] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:40:27 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:27 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2617.737185] loop6: detected capacity change from 0 to 40
20:40:27 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:27 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:27 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

20:40:27 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2617.758375] loop0: detected capacity change from 0 to 40
[ 2617.760712] loop5: detected capacity change from 0 to 40
20:40:27 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 2617.778665] loop7: detected capacity change from 0 to 40
[ 2617.784540] FAT-fs (loop5): bogus number of reserved sectors
[ 2617.785361] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2617.799582] loop4: detected capacity change from 0 to 40
[ 2617.811437] loop3: detected capacity change from 0 to 40
[ 2617.820793] loop1: detected capacity change from 0 to 40
[ 2617.874936] syz-executor.0: attempt to access beyond end of device
[ 2617.874936] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2617.876005] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:40:28 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

20:40:28 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2618.034318] syz-executor.7: attempt to access beyond end of device
[ 2618.034318] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2618.036196] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2618.047850] loop6: detected capacity change from 0 to 40
[ 2618.048209] syz-executor.4: attempt to access beyond end of device
[ 2618.048209] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2618.049744] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2618.060723] loop0: detected capacity change from 0 to 40
[ 2618.061690] syz-executor.1: attempt to access beyond end of device
[ 2618.061690] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2618.062791] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2618.101919] syz-executor.0: attempt to access beyond end of device
[ 2618.101919] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2618.102970] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:40:28 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:28 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2618.180201] syz-executor.3: attempt to access beyond end of device
[ 2618.180201] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2618.182245] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:40:28 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 2618.201761] loop0: detected capacity change from 0 to 40
[ 2618.239523] loop4: detected capacity change from 0 to 40
[ 2618.265800] syz-executor.0: attempt to access beyond end of device
[ 2618.265800] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2618.266786] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2618.389989] syz-executor.4: attempt to access beyond end of device
[ 2618.389989] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2618.391271] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2618.452736] loop1: detected capacity change from 0 to 40
[ 2618.562203] syz-executor.1: attempt to access beyond end of device
[ 2618.562203] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2618.563438] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2631.254506] loop7: detected capacity change from 0 to 40
20:40:41 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

20:40:41 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:41 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2631.268023] loop5: detected capacity change from 0 to 40
20:40:41 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef)

20:40:41 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:41 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:40:41 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2631.274723] FAT-fs (loop5): bogus number of reserved sectors
[ 2631.275129] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2631.285946] loop6: detected capacity change from 0 to 40
[ 2631.298199] loop4: detected capacity change from 0 to 40
[ 2631.307981] loop0: detected capacity change from 0 to 40
[ 2631.322630] loop1: detected capacity change from 0 to 40
[ 2631.323299] loop3: detected capacity change from 0 to 40
[ 2631.440654] syz-executor.7: attempt to access beyond end of device
[ 2631.440654] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2631.441765] Buffer I/O error on dev loop7, logical block 10, lost async page write
20:40:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

[ 2631.493257] syz-executor.4: attempt to access beyond end of device
[ 2631.493257] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2631.494736] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2631.524969] syz-executor.1: attempt to access beyond end of device
[ 2631.524969] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2631.526286] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2631.562409] syz-executor.3: attempt to access beyond end of device
[ 2631.562409] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2631.563768] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2631.567449] syz-executor.0: attempt to access beyond end of device
[ 2631.567449] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2631.568972] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2631.583310] loop6: detected capacity change from 0 to 40
20:40:41 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:41 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:40:41 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef)

20:40:41 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2631.754126] loop7: detected capacity change from 0 to 40
20:40:41 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef)

20:40:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

[ 2631.775673] loop4: detected capacity change from 0 to 40
[ 2631.794410] loop0: detected capacity change from 0 to 40
[ 2631.827143] loop3: detected capacity change from 0 to 40
[ 2631.853007] loop1: detected capacity change from 0 to 40
[ 2631.901377] loop6: detected capacity change from 0 to 40
[ 2632.079138] syz-executor.7: attempt to access beyond end of device
[ 2632.079138] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2632.080282] Buffer I/O error on dev loop7, logical block 10, lost async page write
20:40:42 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2632.131135] syz-executor.0: attempt to access beyond end of device
[ 2632.131135] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2632.133299] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2632.165390] syz-executor.1: attempt to access beyond end of device
[ 2632.165390] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2632.166753] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2632.192553] syz-executor.4: attempt to access beyond end of device
[ 2632.192553] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2632.194755] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2632.199352] syz-executor.3: attempt to access beyond end of device
[ 2632.199352] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2632.200418] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2632.209968] loop5: detected capacity change from 0 to 40
[ 2632.224303] FAT-fs (loop5): bogus number of reserved sectors
[ 2632.224749] FAT-fs (loop5): Can't find a valid FAT filesystem
20:40:42 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:40:42 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:40:42 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)

20:40:42 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2632.396611] loop7: detected capacity change from 0 to 40
[ 2632.501080] loop1: detected capacity change from 0 to 40
[ 2632.525082] loop3: detected capacity change from 0 to 40
20:41:00 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef)

20:41:00 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:41:00 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:00 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:00 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:00 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:41:00 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2650.049843] loop4: detected capacity change from 0 to 40
20:41:00 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2650.056963] loop5: detected capacity change from 0 to 40
[ 2650.070006] loop6: detected capacity change from 0 to 40
[ 2650.071592] loop0: detected capacity change from 0 to 40
[ 2650.072777] loop3: detected capacity change from 0 to 40
[ 2650.077037] loop7: detected capacity change from 0 to 40
[ 2650.079326] loop1: detected capacity change from 0 to 40
[ 2650.081214] FAT-fs (loop5): bogus number of reserved sectors
[ 2650.082047] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2650.237014] bio_check_eod: 2 callbacks suppressed
[ 2650.237033] syz-executor.0: attempt to access beyond end of device
[ 2650.237033] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2650.238766] buffer_io_error: 2 callbacks suppressed
[ 2650.238777] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2650.247347] syz-executor.7: attempt to access beyond end of device
[ 2650.247347] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2650.248692] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2650.269909] syz-executor.1: attempt to access beyond end of device
[ 2650.269909] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2650.271051] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2650.307851] syz-executor.6: attempt to access beyond end of device
[ 2650.307851] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2650.309105] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2650.316228] syz-executor.4: attempt to access beyond end of device
[ 2650.316228] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2650.317759] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2650.319198] syz-executor.3: attempt to access beyond end of device
[ 2650.319198] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2650.320341] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:41:00 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2650.518296] loop0: detected capacity change from 0 to 40
[ 2650.648922] syz-executor.0: attempt to access beyond end of device
[ 2650.648922] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2650.652080] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:41:12 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:12 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:41:12 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:12 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:12 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:41:12 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:12 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:41:12 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2662.803953] loop1: detected capacity change from 0 to 40
[ 2662.807521] loop4: detected capacity change from 0 to 40
[ 2662.808804] loop7: detected capacity change from 0 to 40
[ 2662.811815] loop3: detected capacity change from 0 to 40
[ 2662.820004] loop0: detected capacity change from 0 to 40
[ 2662.852264] loop5: detected capacity change from 0 to 40
[ 2662.857315] loop6: detected capacity change from 0 to 40
[ 2662.879136] FAT-fs (loop5): bogus number of reserved sectors
[ 2662.880050] FAT-fs (loop5): Can't find a valid FAT filesystem
20:41:13 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2662.963416] syz-executor.4: attempt to access beyond end of device
[ 2662.963416] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2662.964109] syz-executor.1: attempt to access beyond end of device
[ 2662.964109] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2662.964729] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2662.966237] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2662.977774] syz-executor.3: attempt to access beyond end of device
[ 2662.977774] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2662.978940] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2663.026304] loop7: detected capacity change from 0 to 40
20:41:13 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:13 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2663.140402] syz-executor.7: attempt to access beyond end of device
[ 2663.140402] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2663.141733] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2663.168642] loop0: detected capacity change from 0 to 40
[ 2663.187342] loop1: detected capacity change from 0 to 40
20:41:13 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:13 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:13 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2663.247848] syz-executor.6: attempt to access beyond end of device
[ 2663.247848] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2663.249908] Buffer I/O error on dev loop6, logical block 10, lost async page write
20:41:13 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2663.326310] syz-executor.1: attempt to access beyond end of device
[ 2663.326310] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2663.327700] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2663.344431] loop4: detected capacity change from 0 to 40
[ 2663.396641] loop7: detected capacity change from 0 to 40
20:41:13 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2663.409223] loop0: detected capacity change from 0 to 40
[ 2663.420034] loop3: detected capacity change from 0 to 40
[ 2663.471792] loop1: detected capacity change from 0 to 40
[ 2663.563954] syz-executor.1: attempt to access beyond end of device
[ 2663.563954] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2663.565096] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2663.666334] syz-executor.7: attempt to access beyond end of device
[ 2663.666334] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2663.667759] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2663.716778] syz-executor.4: attempt to access beyond end of device
[ 2663.716778] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2663.718279] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2663.735305] syz-executor.3: attempt to access beyond end of device
[ 2663.735305] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2663.737899] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:41:30 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:30 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:30 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:30 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:30 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:41:30 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:30 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:30 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2680.213118] loop7: detected capacity change from 0 to 40
[ 2680.216981] loop0: detected capacity change from 0 to 40
[ 2680.218434] loop1: detected capacity change from 0 to 40
[ 2680.222219] loop3: detected capacity change from 0 to 40
[ 2680.265801] loop5: detected capacity change from 0 to 40
[ 2680.269859] loop6: detected capacity change from 0 to 40
[ 2680.272781] FAT-fs (loop5): bogus number of reserved sectors
[ 2680.273289] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2680.302129] loop4: detected capacity change from 0 to 40
[ 2680.430089] syz-executor.0: attempt to access beyond end of device
[ 2680.430089] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2680.431856] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2680.465934] syz-executor.3: attempt to access beyond end of device
[ 2680.465934] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2680.467729] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2680.514090] syz-executor.7: attempt to access beyond end of device
[ 2680.514090] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2680.515979] Buffer I/O error on dev loop7, logical block 10, lost async page write
20:41:30 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2680.539869] syz-executor.1: attempt to access beyond end of device
[ 2680.539869] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2680.541933] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2680.685040] loop0: detected capacity change from 0 to 40
20:41:30 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2680.711984] syz-executor.4: attempt to access beyond end of device
[ 2680.711984] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2680.714041] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2680.727952] syz-executor.6: attempt to access beyond end of device
[ 2680.727952] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2680.730035] Buffer I/O error on dev loop6, logical block 10, lost async page write
20:41:30 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:30 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:30 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2680.922366] loop4: detected capacity change from 0 to 40
20:41:31 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2681.015578] loop7: detected capacity change from 0 to 40
[ 2681.022667] loop3: detected capacity change from 0 to 40
[ 2681.146230] loop6: detected capacity change from 0 to 40
[ 2681.178025] syz-executor.0: attempt to access beyond end of device
[ 2681.178025] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2681.180015] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2681.182530] loop1: detected capacity change from 0 to 40
[ 2681.193402] syz-executor.4: attempt to access beyond end of device
[ 2681.193402] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2681.195761] Buffer I/O error on dev loop4, logical block 10, lost async page write
20:41:31 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2681.320327] syz-executor.3: attempt to access beyond end of device
[ 2681.320327] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2681.322811] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2681.354975] syz-executor.7: attempt to access beyond end of device
[ 2681.354975] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2681.356888] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2681.356889] loop5: detected capacity change from 0 to 40
[ 2681.370232] FAT-fs (loop5): invalid media value (0x00)
[ 2681.371038] FAT-fs (loop5): Can't find a valid FAT filesystem
20:41:31 executing program 4:
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000180), 0x80000000, &(0x7f0000000300))
fsopen(0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

20:41:31 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:31 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:31 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="c35f7eecde533db03783d717fc0cc33ee90a8fe54c380a85b78e8a8d04d4680f0601d44685481c59281cbd59f1932b57acadf77c9e55622dee9bd49421e7f2ff9ab4b5f3162f22d65bac60e8d892423557a84b3956969cdfa2a0286874dada4ea0512f795f038b35"])
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$netlink(r1, 0x10e, 0x9, 0x0, &(0x7f0000000000))
eventfd2(0xae, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

20:41:31 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:31 executing program 1:
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000180), 0x80000000, &(0x7f0000000300))
fsopen(0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2681.677414] loop0: detected capacity change from 0 to 40
20:41:31 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2681.776949] loop7: detected capacity change from 0 to 40
[ 2681.851899] loop6: detected capacity change from 0 to 40
20:41:32 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2682.038474] loop4: detected capacity change from 0 to 40
20:41:32 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:32 executing program 7:
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000180), 0x80000000, &(0x7f0000000300))
fsopen(0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
perf_event_open$cgroup(&(0x7f0000000540)={0x5, 0x80, 0x40, 0x0, 0xa4, 0x8, 0x0, 0x21e3, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={&(0x7f0000000500), 0x2}, 0x4, 0x2, 0x576e, 0x4, 0xfffffffffffffff8, 0x3ff, 0x9, 0x0, 0x9, 0x0, 0x100000001}, 0xffffffffffffffff, 0x7, r1, 0x3)
clock_gettime(0x0, &(0x7f0000000440))

20:41:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1)

[ 2682.237867] loop0: detected capacity change from 0 to 40
[ 2682.265370] loop1: detected capacity change from 0 to 40
[ 2682.290315] FAULT_INJECTION: forcing a failure.
[ 2682.290315] name failslab, interval 1, probability 0, space 0, times 1
[ 2682.291332] CPU: 1 PID: 12349 Comm: syz-executor.1 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2682.291915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2682.292487] Call Trace:
[ 2682.292677]  <TASK>
[ 2682.292848]  dump_stack_lvl+0x8f/0xb7
[ 2682.293145]  should_fail_ex.cold+0x5/0xa
[ 2682.293452]  should_failslab+0x9/0x20
[ 2682.293739]  __kmem_cache_alloc_node+0x5b/0x400
[ 2682.294092]  ? alloc_pipe_info+0x109/0x590
[ 2682.294416]  kmalloc_trace+0x26/0x60
[ 2682.294698]  alloc_pipe_info+0x109/0x590
[ 2682.295009]  splice_direct_to_actor+0x6e6/0x8c0
[ 2682.295355]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2682.295712]  ? inode_security+0x105/0x140
[ 2682.296030]  ? avc_policy_seqno+0xd/0x70
[ 2682.296337]  ? selinux_file_permission+0x3a/0x510
[ 2682.296706]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2682.297082]  ? security_file_permission+0xb5/0xe0
[ 2682.297443]  do_splice_direct+0x1bc/0x290
[ 2682.297759]  ? __pfx_do_splice_direct+0x10/0x10
[ 2682.298152]  ? lock_is_held_type+0xdb/0x130
[ 2682.298614]  do_sendfile+0xb1d/0x1280
[ 2682.298911]  ? __pfx_do_sendfile+0x10/0x10
[ 2682.299243]  __x64_sys_sendfile64+0x248/0x2a0
[ 2682.299577]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2682.299920]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2682.300296]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2682.300684]  do_syscall_64+0x3f/0x90
[ 2682.300958]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2682.301339] RIP: 0033:0x7f617dc03b19
[ 2682.301611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2682.302880] RSP: 002b:00007f617b179188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2682.303411] RAX: ffffffffffffffda RBX: 00007f617dd16f60 RCX: 00007f617dc03b19
[ 2682.303910] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2682.304406] RBP: 00007f617b1791d0 R08: 0000000000000000 R09: 0000000000000000
[ 2682.304902] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2682.305407] R13: 00007ffc401d28bf R14: 00007f617b179300 R15: 0000000000022000
[ 2682.305927]  </TASK>
20:41:32 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 1)

[ 2682.379859] loop3: detected capacity change from 0 to 40
[ 2682.388951] FAULT_INJECTION: forcing a failure.
[ 2682.388951] name failslab, interval 1, probability 0, space 0, times 0
[ 2682.389870] CPU: 1 PID: 12353 Comm: syz-executor.3 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2682.390465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2682.391041] Call Trace:
[ 2682.391231]  <TASK>
[ 2682.391407]  dump_stack_lvl+0x8f/0xb7
[ 2682.391700]  should_fail_ex.cold+0x5/0xa
[ 2682.392010]  should_failslab+0x9/0x20
[ 2682.392298]  __kmem_cache_alloc_node+0x5b/0x400
[ 2682.392647]  ? alloc_pipe_info+0x109/0x590
[ 2682.392976]  kmalloc_trace+0x26/0x60
[ 2682.393258]  alloc_pipe_info+0x109/0x590
[ 2682.393571]  splice_direct_to_actor+0x6e6/0x8c0
[ 2682.393917]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2682.394275]  ? inode_security+0x105/0x140
[ 2682.394591]  ? avc_policy_seqno+0xd/0x70
[ 2682.394880]  ? selinux_file_permission+0x3a/0x510
[ 2682.395242]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2682.395618]  ? security_file_permission+0xb5/0xe0
[ 2682.395987]  do_splice_direct+0x1bc/0x290
[ 2682.396290]  ? __pfx_do_splice_direct+0x10/0x10
[ 2682.396642]  ? lock_is_held_type+0xdb/0x130
[ 2682.396975]  do_sendfile+0xb1d/0x1280
[ 2682.397273]  ? __pfx_do_sendfile+0x10/0x10
[ 2682.397599]  __x64_sys_sendfile64+0x248/0x2a0
[ 2682.397925]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2682.398287]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2682.398666]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2682.399050]  do_syscall_64+0x3f/0x90
[ 2682.399326]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2682.399704] RIP: 0033:0x7fec36e98b19
[ 2682.399974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2682.401240] RSP: 002b:00007fec3440e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2682.401753] RAX: ffffffffffffffda RBX: 00007fec36fabf60 RCX: 00007fec36e98b19
[ 2682.402261] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2682.402765] RBP: 00007fec3440e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2682.403263] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2682.403761] R13: 00007ffdd9d0783f R14: 00007fec3440e300 R15: 0000000000022000
[ 2682.404279]  </TASK>
[ 2696.364727] loop3: detected capacity change from 0 to 40
[ 2696.366233] loop4: detected capacity change from 0 to 40
20:41:46 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:46 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:41:46 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 2)

20:41:46 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2)

20:41:46 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 1)

20:41:46 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 1)

20:41:46 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 1)

20:41:46 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 1)

[ 2696.401122] FAULT_INJECTION: forcing a failure.
[ 2696.401122] name failslab, interval 1, probability 0, space 0, times 0
[ 2696.402123] CPU: 0 PID: 12364 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2696.402669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2696.403210] Call Trace:
[ 2696.403392]  <TASK>
[ 2696.403555]  dump_stack_lvl+0x8f/0xb7
[ 2696.403827]  should_fail_ex.cold+0x5/0xa
[ 2696.404120]  should_failslab+0x9/0x20
[ 2696.404394]  __kmem_cache_alloc_node+0x5b/0x400
[ 2696.404726]  ? alloc_pipe_info+0x109/0x590
[ 2696.405036]  kmalloc_trace+0x26/0x60
[ 2696.405303]  alloc_pipe_info+0x109/0x590
[ 2696.405600]  splice_direct_to_actor+0x6e6/0x8c0
[ 2696.405936]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2696.406102] loop6: detected capacity change from 0 to 40
[ 2696.406282]  ? inode_security+0x105/0x140
[ 2696.407257]  ? avc_policy_seqno+0xd/0x70
[ 2696.407544]  ? selinux_file_permission+0x3a/0x510
[ 2696.407886]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2696.408242]  ? security_file_permission+0xb5/0xe0
[ 2696.408586]  do_splice_direct+0x1bc/0x290
[ 2696.408878]  ? __pfx_do_splice_direct+0x10/0x10
[ 2696.409212]  ? lock_is_held_type+0xdb/0x130
[ 2696.409523]  do_sendfile+0xb1d/0x1280
[ 2696.409808]  ? __pfx_do_sendfile+0x10/0x10
[ 2696.410127]  __x64_sys_sendfile64+0x248/0x2a0
[ 2696.410443]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2696.410792]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2696.411155]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2696.411521]  do_syscall_64+0x3f/0x90
[ 2696.411792]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2696.412157] RIP: 0033:0x7fa0e98b7b19
[ 2696.412414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2696.413586] RSP: 002b:00007fa0e6e2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2696.414105] RAX: ffffffffffffffda RBX: 00007fa0e99caf60 RCX: 00007fa0e98b7b19
[ 2696.414580] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2696.415053] RBP: 00007fa0e6e2d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2696.415519] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2696.415989] R13: 00007ffcecfd564f R14: 00007fa0e6e2d300 R15: 0000000000022000
[ 2696.416478]  </TASK>
[ 2696.418588] loop5: detected capacity change from 0 to 40
[ 2696.430398] FAT-fs (loop5): invalid media value (0x00)
[ 2696.430833] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2696.444589] loop7: detected capacity change from 0 to 40
[ 2696.454062] loop0: detected capacity change from 0 to 40
[ 2696.459750] loop1: detected capacity change from 0 to 40
[ 2696.502143] FAULT_INJECTION: forcing a failure.
[ 2696.502143] name failslab, interval 1, probability 0, space 0, times 0
[ 2696.503250] CPU: 0 PID: 12369 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2696.503789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2696.504337] Call Trace:
[ 2696.504522]  <TASK>
[ 2696.504688]  dump_stack_lvl+0x8f/0xb7
[ 2696.504965]  should_fail_ex.cold+0x5/0xa
[ 2696.505270]  should_failslab+0x9/0x20
[ 2696.505551]  __kmem_cache_alloc_node+0x5b/0x400
[ 2696.505892]  ? alloc_pipe_info+0x109/0x590
[ 2696.506224]  kmalloc_trace+0x26/0x60
[ 2696.506491]  alloc_pipe_info+0x109/0x590
[ 2696.506789]  splice_direct_to_actor+0x6e6/0x8c0
[ 2696.507121]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2696.507478]  ? inode_security+0x105/0x140
[ 2696.507796]  ? avc_policy_seqno+0xd/0x70
[ 2696.508089]  ? selinux_file_permission+0x3a/0x510
[ 2696.508446]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2696.508804]  ? security_file_permission+0xb5/0xe0
[ 2696.509153]  do_splice_direct+0x1bc/0x290
[ 2696.509451]  ? __pfx_do_splice_direct+0x10/0x10
[ 2696.509786]  ? lock_is_held_type+0xdb/0x130
[ 2696.510108]  do_sendfile+0xb1d/0x1280
[ 2696.510392]  ? __pfx_do_sendfile+0x10/0x10
[ 2696.510709]  __x64_sys_sendfile64+0x248/0x2a0
[ 2696.511026]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2696.511372]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2696.511735]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2696.512109]  do_syscall_64+0x3f/0x90
[ 2696.512373]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2696.512737] RIP: 0033:0x7ff897164b19
[ 2696.512993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2696.514185] RSP: 002b:00007ff8946da188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2696.514706] RAX: ffffffffffffffda RBX: 00007ff897277f60 RCX: 00007ff897164b19
[ 2696.515200] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2696.515704] RBP: 00007ff8946da1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2696.516203] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2696.516713] R13: 00007ffe3fb37a4f R14: 00007ff8946da300 R15: 0000000000022000
[ 2696.517233]  </TASK>
20:41:46 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 2)

[ 2696.539095] FAULT_INJECTION: forcing a failure.
[ 2696.539095] name failslab, interval 1, probability 0, space 0, times 0
[ 2696.540018] CPU: 0 PID: 12374 Comm: syz-executor.7 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2696.540592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2696.541165] Call Trace:
[ 2696.541349]  <TASK>
[ 2696.541522]  dump_stack_lvl+0x8f/0xb7
[ 2696.541807]  should_fail_ex.cold+0x5/0xa
[ 2696.542121]  should_failslab+0x9/0x20
[ 2696.542404]  __kmem_cache_alloc_node+0x5b/0x400
[ 2696.542743]  ? alloc_pipe_info+0x109/0x590
[ 2696.543066]  kmalloc_trace+0x26/0x60
[ 2696.543344]  alloc_pipe_info+0x109/0x590
[ 2696.543648]  splice_direct_to_actor+0x6e6/0x8c0
[ 2696.543988]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2696.544341]  ? inode_security+0x105/0x140
[ 2696.544650]  ? avc_policy_seqno+0xd/0x70
[ 2696.544952]  ? selinux_file_permission+0x3a/0x510
[ 2696.545307]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2696.545682]  ? security_file_permission+0xb5/0xe0
[ 2696.546025]  do_splice_direct+0x1bc/0x290
[ 2696.546335]  ? __pfx_do_splice_direct+0x10/0x10
[ 2696.546688]  ? lock_is_held_type+0xdb/0x130
[ 2696.547017]  do_sendfile+0xb1d/0x1280
[ 2696.547312]  ? __pfx_do_sendfile+0x10/0x10
[ 2696.547640]  __x64_sys_sendfile64+0x248/0x2a0
[ 2696.547974]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2696.548328]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2696.548691]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2696.549074]  do_syscall_64+0x3f/0x90
[ 2696.549346]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2696.549729] RIP: 0033:0x7fb6bd47cb19
[ 2696.549999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2696.551186] RSP: 002b:00007fb6ba9f2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2696.551719] RAX: ffffffffffffffda RBX: 00007fb6bd58ff60 RCX: 00007fb6bd47cb19
[ 2696.552211] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2696.552712] RBP: 00007fb6ba9f21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2696.553216] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2696.553718] R13: 00007ffc22eb636f R14: 00007fb6ba9f2300 R15: 0000000000022000
[ 2696.554234]  </TASK>
[ 2696.556923] bio_check_eod: 7 callbacks suppressed
[ 2696.556948] syz-executor.3: attempt to access beyond end of device
[ 2696.556948] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2696.560257] buffer_io_error: 7 callbacks suppressed
[ 2696.560275] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2696.592297] FAULT_INJECTION: forcing a failure.
[ 2696.592297] name failslab, interval 1, probability 0, space 0, times 0
[ 2696.594317] CPU: 1 PID: 12375 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2696.595525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2696.596711] Call Trace:
[ 2696.597073]  <TASK>
[ 2696.597409]  dump_stack_lvl+0x8f/0xb7
[ 2696.598025]  should_fail_ex.cold+0x5/0xa
[ 2696.598723]  should_failslab+0x9/0x20
[ 2696.599235]  __kmem_cache_alloc_node+0x5b/0x400
[ 2696.599888]  ? alloc_pipe_info+0x109/0x590
[ 2696.600476]  kmalloc_trace+0x26/0x60
[ 2696.600970]  alloc_pipe_info+0x109/0x590
[ 2696.601525]  splice_direct_to_actor+0x6e6/0x8c0
[ 2696.602155]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2696.602801]  ? inode_security+0x105/0x140
[ 2696.603359]  ? avc_policy_seqno+0xd/0x70
[ 2696.603898]  ? selinux_file_permission+0x3a/0x510
[ 2696.604556]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2696.605238]  ? security_file_permission+0xb5/0xe0
[ 2696.605886]  do_splice_direct+0x1bc/0x290
[ 2696.606440]  ? __pfx_do_splice_direct+0x10/0x10
[ 2696.607074]  ? lock_is_held_type+0xdb/0x130
[ 2696.607663]  do_sendfile+0xb1d/0x1280
[ 2696.608195]  ? __pfx_do_sendfile+0x10/0x10
[ 2696.608787]  __x64_sys_sendfile64+0x248/0x2a0
[ 2696.609379]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2696.610021]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2696.610729]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2696.611427]  do_syscall_64+0x3f/0x90
[ 2696.611928]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2696.612616] RIP: 0033:0x7f9d53ef4b19
[ 2696.613099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2696.615351] RSP: 002b:00007f9d5146a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2696.616331] RAX: ffffffffffffffda RBX: 00007f9d54007f60 RCX: 00007f9d53ef4b19
[ 2696.617236] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2696.618148] RBP: 00007f9d5146a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2696.619032] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2696.619933] R13: 00007ffffa87375f R14: 00007f9d5146a300 R15: 0000000000022000
[ 2696.620861]  </TASK>
20:41:46 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 3)

[ 2696.699087] loop4: detected capacity change from 0 to 40
[ 2696.756098] syz-executor.1: attempt to access beyond end of device
[ 2696.756098] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2696.758305] Buffer I/O error on dev loop1, logical block 10, lost async page write
20:41:46 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 2)

20:41:46 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 2)

[ 2696.907425] loop3: detected capacity change from 0 to 40
20:41:46 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 2)

[ 2696.983823] loop6: detected capacity change from 0 to 40
[ 2697.001254] FAULT_INJECTION: forcing a failure.
[ 2697.001254] name failslab, interval 1, probability 0, space 0, times 0
[ 2697.003002] CPU: 1 PID: 12380 Comm: syz-executor.3 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2697.003997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2697.005008] Call Trace:
[ 2697.005349]  <TASK>
[ 2697.005651]  dump_stack_lvl+0x8f/0xb7
[ 2697.006282]  should_fail_ex.cold+0x5/0xa
[ 2697.006821]  should_failslab+0x9/0x20
[ 2697.007320]  __kmem_cache_alloc_node+0x5b/0x400
[ 2697.007925]  ? alloc_pipe_info+0x1e4/0x590
[ 2697.008494]  ? alloc_pipe_info+0x1e4/0x590
[ 2697.009045]  __kmalloc+0x46/0xc0
[ 2697.009508]  alloc_pipe_info+0x1e4/0x590
[ 2697.010056]  splice_direct_to_actor+0x6e6/0x8c0
[ 2697.010679]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2697.011306]  ? inode_security+0x105/0x140
[ 2697.011852]  ? avc_policy_seqno+0xd/0x70
[ 2697.012376]  ? selinux_file_permission+0x3a/0x510
[ 2697.013016]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2697.013677]  ? security_file_permission+0xb5/0xe0
[ 2697.014320]  do_splice_direct+0x1bc/0x290
[ 2697.014857]  ? __pfx_do_splice_direct+0x10/0x10
[ 2697.015473]  ? lock_is_held_type+0xdb/0x130
[ 2697.016046]  do_sendfile+0xb1d/0x1280
[ 2697.016572]  ? __pfx_do_sendfile+0x10/0x10
[ 2697.017134]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2697.017822]  __x64_sys_sendfile64+0x248/0x2a0
[ 2697.018429]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2697.019086]  ? syscall_enter_from_user_mode+0x2b/0x50
[ 2697.019763]  do_syscall_64+0x3f/0x90
[ 2697.020256]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2697.020919] RIP: 0033:0x7fec36e98b19
[ 2697.021395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2697.023583] RSP: 002b:00007fec3440e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2697.024527] RAX: ffffffffffffffda RBX: 00007fec36fabf60 RCX: 00007fec36e98b19
[ 2697.025402] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2697.026300] RBP: 00007fec3440e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2697.027187] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2697.028085] R13: 00007ffdd9d0783f R14: 00007fec3440e300 R15: 0000000000022000
[ 2697.029029]  </TASK>
[ 2697.046194] syz-executor.4: attempt to access beyond end of device
[ 2697.046194] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2697.048154] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2697.059110] loop0: detected capacity change from 0 to 40
[ 2697.101173] loop7: detected capacity change from 0 to 40
[ 2697.321002] syz-executor.6: attempt to access beyond end of device
[ 2697.321002] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2697.322851] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2697.353303] syz-executor.7: attempt to access beyond end of device
[ 2697.353303] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2697.354937] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2697.367212] syz-executor.0: attempt to access beyond end of device
[ 2697.367212] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2697.369044] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2713.068370] loop7: detected capacity change from 0 to 40
20:42:03 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 3)

20:42:03 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 3)

20:42:03 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 4)

20:42:03 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 3)

[ 2713.074182] loop4: detected capacity change from 0 to 40
20:42:03 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:42:03 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:42:03 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 3)

20:42:03 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 3)

[ 2713.105132] FAULT_INJECTION: forcing a failure.
[ 2713.105132] name failslab, interval 1, probability 0, space 0, times 0
[ 2713.106077] CPU: 1 PID: 12399 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2713.106645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2713.107178] Call Trace:
[ 2713.107357]  <TASK>
[ 2713.107517]  dump_stack_lvl+0x8f/0xb7
[ 2713.107783]  should_fail_ex.cold+0x5/0xa
[ 2713.108076]  should_failslab+0x9/0x20
[ 2713.108344]  __kmem_cache_alloc_node+0x5b/0x400
[ 2713.108664]  ? alloc_pipe_info+0x1e4/0x590
[ 2713.108966]  ? alloc_pipe_info+0x1e4/0x590
[ 2713.109263]  __kmalloc+0x46/0xc0
[ 2713.109511]  alloc_pipe_info+0x1e4/0x590
[ 2713.109806]  splice_direct_to_actor+0x6e6/0x8c0
[ 2713.110127]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2713.110466]  ? inode_security+0x105/0x140
[ 2713.110763]  ? avc_policy_seqno+0xd/0x70
[ 2713.111048]  ? selinux_file_permission+0x3a/0x510
[ 2713.111387]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2713.111741]  ? security_file_permission+0xb5/0xe0
[ 2713.112077]  do_splice_direct+0x1bc/0x290
[ 2713.112368]  ? __pfx_do_splice_direct+0x10/0x10
[ 2713.112700]  ? lock_is_held_type+0xdb/0x130
[ 2713.112920] loop1: detected capacity change from 0 to 40
[ 2713.113006]  do_sendfile+0xb1d/0x1280
[ 2713.113955]  ? __pfx_do_sendfile+0x10/0x10
[ 2713.114256]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2713.114634]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2713.115010]  __x64_sys_sendfile64+0x248/0x2a0
[ 2713.115322]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2713.115665]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2713.116021]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2713.116384]  do_syscall_64+0x3f/0x90
[ 2713.116650]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2713.117006] RIP: 0033:0x7fa0e98b7b19
[ 2713.117264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2713.118451] RSP: 002b:00007fa0e6e2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2713.118951] RAX: ffffffffffffffda RBX: 00007fa0e99caf60 RCX: 00007fa0e98b7b19
[ 2713.119420] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2713.119886] RBP: 00007fa0e6e2d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2713.120350] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2713.120826] R13: 00007ffcecfd564f R14: 00007fa0e6e2d300 R15: 0000000000022000
[ 2713.121318]  </TASK>
[ 2713.130761] loop6: detected capacity change from 0 to 40
[ 2713.132815] loop0: detected capacity change from 0 to 40
[ 2713.141766] loop3: detected capacity change from 0 to 40
[ 2713.161691] loop5: detected capacity change from 0 to 40
[ 2713.163134] FAULT_INJECTION: forcing a failure.
[ 2713.163134] name failslab, interval 1, probability 0, space 0, times 0
[ 2713.164076] CPU: 1 PID: 12407 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2713.164632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2713.165174] Call Trace:
[ 2713.165353]  <TASK>
[ 2713.165514]  dump_stack_lvl+0x8f/0xb7
[ 2713.165787]  should_fail_ex.cold+0x5/0xa
[ 2713.166081]  should_failslab+0x9/0x20
[ 2713.166374]  __kmem_cache_alloc_node+0x5b/0x400
[ 2713.166705]  ? alloc_pipe_info+0x1e4/0x590
[ 2713.167012]  ? alloc_pipe_info+0x1e4/0x590
[ 2713.167312]  __kmalloc+0x46/0xc0
[ 2713.167564]  alloc_pipe_info+0x1e4/0x590
[ 2713.167859]  splice_direct_to_actor+0x6e6/0x8c0
[ 2713.168191]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2713.168535]  ? inode_security+0x105/0x140
[ 2713.168832]  ? avc_policy_seqno+0xd/0x70
[ 2713.169123]  ? selinux_file_permission+0x3a/0x510
[ 2713.169474]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2713.169835]  ? security_file_permission+0xb5/0xe0
[ 2713.170182]  do_splice_direct+0x1bc/0x290
[ 2713.170499]  ? __pfx_do_splice_direct+0x10/0x10
[ 2713.170832]  ? lock_is_held_type+0xdb/0x130
[ 2713.171147]  do_sendfile+0xb1d/0x1280
[ 2713.171432]  ? __pfx_do_sendfile+0x10/0x10
[ 2713.171749]  __x64_sys_sendfile64+0x248/0x2a0
[ 2713.172063]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2713.172408]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2713.172769]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2713.173141]  do_syscall_64+0x3f/0x90
[ 2713.173412]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2713.173776] RIP: 0033:0x7f9d53ef4b19
[ 2713.174035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2713.175213] RSP: 002b:00007f9d5146a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2713.175726] RAX: ffffffffffffffda RBX: 00007f9d54007f60 RCX: 00007f9d53ef4b19
[ 2713.176196] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2713.176671] RBP: 00007f9d5146a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2713.177143] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2713.177615] R13: 00007ffffa87375f R14: 00007f9d5146a300 R15: 0000000000022000
[ 2713.178109]  </TASK>
[ 2713.181077] FAULT_INJECTION: forcing a failure.
[ 2713.181077] name failslab, interval 1, probability 0, space 0, times 0
[ 2713.182309] CPU: 1 PID: 12408 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2713.182866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2713.183569] Call Trace:
[ 2713.183841]  <TASK>
[ 2713.184040]  dump_stack_lvl+0x8f/0xb7
[ 2713.184340]  should_fail_ex.cold+0x5/0xa
[ 2713.184633]  should_failslab+0x9/0x20
[ 2713.184904]  __kmem_cache_alloc_node+0x5b/0x400
[ 2713.185329]  ? alloc_pipe_info+0x1e4/0x590
[ 2713.185677]  ? alloc_pipe_info+0x1e4/0x590
[ 2713.185977]  __kmalloc+0x46/0xc0
[ 2713.186325]  alloc_pipe_info+0x1e4/0x590
[ 2713.186710]  splice_direct_to_actor+0x6e6/0x8c0
[ 2713.187044]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2713.187390]  ? inode_security+0x105/0x140
[ 2713.187788]  ? avc_policy_seqno+0xd/0x70
[ 2713.188145]  ? selinux_file_permission+0x3a/0x510
[ 2713.188616]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2713.188977]  ? security_file_permission+0xb5/0xe0
[ 2713.189351]  do_splice_direct+0x1bc/0x290
[ 2713.189726]  ? __pfx_do_splice_direct+0x10/0x10
[ 2713.190144]  ? lock_is_held_type+0xdb/0x130
[ 2713.190524]  do_sendfile+0xb1d/0x1280
[ 2713.190926]  ? __pfx_do_sendfile+0x10/0x10
[ 2713.191255]  __x64_sys_sendfile64+0x248/0x2a0
[ 2713.191679]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2713.192149]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2713.192612]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2713.193007]  do_syscall_64+0x3f/0x90
[ 2713.193285]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2713.193760] RIP: 0033:0x7ff897164b19
[ 2713.194086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2713.195601] RSP: 002b:00007ff8946da188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2713.196285] RAX: ffffffffffffffda RBX: 00007ff897277f60 RCX: 00007ff897164b19
[ 2713.196900] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2713.197400] RBP: 00007ff8946da1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2713.198006] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2713.198525] R13: 00007ffe3fb37a4f R14: 00007ff8946da300 R15: 0000000000022000
[ 2713.199049]  </TASK>
[ 2713.205130] FAT-fs (loop5): invalid media value (0x00)
[ 2713.205671] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2713.207789] FAULT_INJECTION: forcing a failure.
[ 2713.207789] name failslab, interval 1, probability 0, space 0, times 0
[ 2713.208924] CPU: 1 PID: 12404 Comm: syz-executor.1 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2713.209475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2713.210203] Call Trace:
[ 2713.210460]  <TASK>
[ 2713.210692]  dump_stack_lvl+0x8f/0xb7
[ 2713.210979]  should_fail_ex.cold+0x5/0xa
[ 2713.211303]  should_failslab+0x9/0x20
[ 2713.211612]  __kmem_cache_alloc_node+0x5b/0x400
[ 2713.212079]  ? alloc_pipe_info+0x1e4/0x590
[ 2713.212407]  ? alloc_pipe_info+0x1e4/0x590
[ 2713.212780]  __kmalloc+0x46/0xc0
[ 2713.213092]  alloc_pipe_info+0x1e4/0x590
[ 2713.213427]  splice_direct_to_actor+0x6e6/0x8c0
[ 2713.213879]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2713.214318]  ? inode_security+0x105/0x140
[ 2713.214707]  ? avc_policy_seqno+0xd/0x70
[ 2713.214998]  ? selinux_file_permission+0x3a/0x510
[ 2713.215373]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2713.215841]  ? security_file_permission+0xb5/0xe0
[ 2713.216204]  do_splice_direct+0x1bc/0x290
[ 2713.216572]  ? __pfx_do_splice_direct+0x10/0x10
[ 2713.216996]  ? lock_is_held_type+0xdb/0x130
[ 2713.217440]  do_sendfile+0xb1d/0x1280
[ 2713.217844]  ? __pfx_do_sendfile+0x10/0x10
[ 2713.218254]  __x64_sys_sendfile64+0x248/0x2a0
[ 2713.218595]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2713.219000]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2713.219463]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2713.219864]  do_syscall_64+0x3f/0x90
[ 2713.220211]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2713.220626] RIP: 0033:0x7f617dc03b19
[ 2713.221020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2713.222519] RSP: 002b:00007f617b179188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2713.223200] RAX: ffffffffffffffda RBX: 00007f617dd16f60 RCX: 00007f617dc03b19
[ 2713.223735] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2713.224308] RBP: 00007f617b1791d0 R08: 0000000000000000 R09: 0000000000000000
[ 2713.224971] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2713.225641] R13: 00007ffc401d28bf R14: 00007f617b179300 R15: 0000000000022000
[ 2713.226172]  </TASK>
[ 2713.292140] FAULT_INJECTION: forcing a failure.
[ 2713.292140] name failslab, interval 1, probability 0, space 0, times 0
[ 2713.293654] CPU: 1 PID: 12397 Comm: syz-executor.7 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2713.294216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2713.294777] Call Trace:
[ 2713.294961]  <TASK>
[ 2713.295124]  dump_stack_lvl+0x8f/0xb7
[ 2713.295399]  should_fail_ex.cold+0x5/0xa
[ 2713.295700]  should_failslab+0x9/0x20
[ 2713.295971]  __kmem_cache_alloc_node+0x5b/0x400
[ 2713.296297]  ? alloc_pipe_info+0x1e4/0x590
[ 2713.296622]  ? alloc_pipe_info+0x1e4/0x590
[ 2713.296926]  __kmalloc+0x46/0xc0
[ 2713.297180]  alloc_pipe_info+0x1e4/0x590
[ 2713.297480]  splice_direct_to_actor+0x6e6/0x8c0
[ 2713.297818]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2713.298156]  ? inode_security+0x105/0x140
[ 2713.298460]  ? avc_policy_seqno+0xd/0x70
[ 2713.298751]  ? selinux_file_permission+0x3a/0x510
[ 2713.299106]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2713.299461]  ? security_file_permission+0xb5/0xe0
[ 2713.299810]  do_splice_direct+0x1bc/0x290
[ 2713.300118]  ? __pfx_do_splice_direct+0x10/0x10
[ 2713.300451]  ? lock_is_held_type+0xdb/0x130
[ 2713.300776]  do_sendfile+0xb1d/0x1280
[ 2713.301066]  ? __pfx_do_sendfile+0x10/0x10
[ 2713.301398]  __x64_sys_sendfile64+0x248/0x2a0
[ 2713.301727]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2713.302097]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2713.302477]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2713.302867]  do_syscall_64+0x3f/0x90
[ 2713.303155]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2713.303539] RIP: 0033:0x7fb6bd47cb19
[ 2713.303815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2713.305097] RSP: 002b:00007fb6ba9f2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2713.305645] RAX: ffffffffffffffda RBX: 00007fb6bd58ff60 RCX: 00007fb6bd47cb19
[ 2713.306150] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000007
[ 2713.306664] RBP: 00007fb6ba9f21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2713.307175] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2713.307685] R13: 00007ffc22eb636f R14: 00007fb6ba9f2300 R15: 0000000000022000
[ 2713.308215]  </TASK>
[ 2713.330820] syz-executor.3: attempt to access beyond end of device
[ 2713.330820] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2713.332061] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:42:03 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 4)

20:42:03 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 4)

20:42:03 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 4)

20:42:03 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 5)

[ 2713.499057] loop4: detected capacity change from 0 to 40
[ 2713.548601] loop0: detected capacity change from 0 to 40
[ 2713.554824] loop1: detected capacity change from 0 to 40
[ 2713.597288] loop3: detected capacity change from 0 to 40
[ 2713.695876] syz-executor.4: attempt to access beyond end of device
[ 2713.695876] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2713.697090] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2713.729136] FAULT_INJECTION: forcing a failure.
[ 2713.729136] name failslab, interval 1, probability 0, space 0, times 0
[ 2713.730920] CPU: 0 PID: 12420 Comm: syz-executor.3 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2713.731928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2713.732944] Call Trace:
[ 2713.733276]  <TASK>
[ 2713.733592]  dump_stack_lvl+0x8f/0xb7
[ 2713.734113]  should_fail_ex.cold+0x5/0xa
[ 2713.734704]  should_failslab+0x9/0x20
[ 2713.735210]  __kmem_cache_alloc_node+0x5b/0x400
[ 2713.735826]  ? iter_file_splice_write+0x169/0xcb0
[ 2713.736455]  ? iter_file_splice_write+0x169/0xcb0
[ 2713.737078]  __kmalloc+0x46/0xc0
[ 2713.737552]  iter_file_splice_write+0x169/0xcb0
[ 2713.738150]  ? generic_file_read_iter+0x330/0x550
[ 2713.738810]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2713.739458]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2713.740115]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2713.740794]  ? inode_security+0x105/0x140
[ 2713.741354]  ? security_file_permission+0xb5/0xe0
[ 2713.741984]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2713.742660]  direct_splice_actor+0x113/0x180
[ 2713.743235]  splice_direct_to_actor+0x33a/0x8c0
[ 2713.743844]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2713.744475]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2713.745131]  ? security_file_permission+0xb5/0xe0
[ 2713.745763]  do_splice_direct+0x1bc/0x290
[ 2713.746326]  ? __pfx_do_splice_direct+0x10/0x10
[ 2713.746946]  ? lock_is_held_type+0xdb/0x130
[ 2713.747531]  do_sendfile+0xb1d/0x1280
[ 2713.748061]  ? __pfx_do_sendfile+0x10/0x10
[ 2713.748641]  __x64_sys_sendfile64+0x248/0x2a0
[ 2713.749229]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2713.749879]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2713.750556]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2713.751241]  do_syscall_64+0x3f/0x90
[ 2713.751729]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2713.752400] RIP: 0033:0x7fec36e98b19
[ 2713.752872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2713.755049] RSP: 002b:00007fec3440e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2713.755998] RAX: ffffffffffffffda RBX: 00007fec36fabf60 RCX: 00007fec36e98b19
[ 2713.756880] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2713.757754] RBP: 00007fec3440e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2713.758649] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2713.759513] R13: 00007ffdd9d0783f R14: 00007fec3440e300 R15: 0000000000022000
[ 2713.760416]  </TASK>
[ 2713.908150] syz-executor.0: attempt to access beyond end of device
[ 2713.908150] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2713.909369] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2713.938018] syz-executor.1: attempt to access beyond end of device
[ 2713.938018] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2713.940183] Buffer I/O error on dev loop1, logical block 10, lost async page write
20:42:15 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 4)

20:42:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1)

20:42:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 5)

20:42:15 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 5)

[ 2725.670429] loop1: detected capacity change from 0 to 40
20:42:15 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 6)

20:42:15 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 4)

20:42:15 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 5)

20:42:15 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2725.686218] loop0: detected capacity change from 0 to 40
[ 2725.687264] loop6: detected capacity change from 0 to 40
[ 2725.692166] loop3: detected capacity change from 0 to 40
[ 2725.693423] loop7: detected capacity change from 0 to 40
[ 2725.698394] loop5: detected capacity change from 0 to 40
[ 2725.707152] FAT-fs (loop5): invalid media value (0x00)
[ 2725.707611] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2725.724174] FAULT_INJECTION: forcing a failure.
[ 2725.724174] name failslab, interval 1, probability 0, space 0, times 0
[ 2725.725253] CPU: 1 PID: 12440 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2725.725806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2725.726349] Call Trace:
[ 2725.726539]  <TASK>
[ 2725.726701]  dump_stack_lvl+0x8f/0xb7
[ 2725.726977]  should_fail_ex.cold+0x5/0xa
[ 2725.727273]  should_failslab+0x9/0x20
[ 2725.727551]  __kmem_cache_alloc_node+0x5b/0x400
[ 2725.727881]  ? alloc_pipe_info+0x109/0x590
[ 2725.728190]  kmalloc_trace+0x26/0x60
[ 2725.728459]  alloc_pipe_info+0x109/0x590
[ 2725.728757]  splice_direct_to_actor+0x6e6/0x8c0
[ 2725.729087]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2725.729426]  ? inode_security+0x105/0x140
[ 2725.729553] loop4: detected capacity change from 0 to 40
[ 2725.729721]  ? avc_policy_seqno+0xd/0x70
[ 2725.730697]  ? selinux_file_permission+0x3a/0x510
[ 2725.731043]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2725.731397]  ? security_file_permission+0xb5/0xe0
[ 2725.731742]  do_splice_direct+0x1bc/0x290
[ 2725.732038]  ? __pfx_do_splice_direct+0x10/0x10
[ 2725.732372]  ? lock_is_held_type+0xdb/0x130
[ 2725.732687]  do_sendfile+0xb1d/0x1280
[ 2725.732977]  ? __pfx_do_sendfile+0x10/0x10
[ 2725.733293]  __x64_sys_sendfile64+0x248/0x2a0
[ 2725.733603]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2725.733944]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2725.734311]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2725.734696]  do_syscall_64+0x3f/0x90
[ 2725.734961]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2725.735321] RIP: 0033:0x7fef9c758b19
[ 2725.735583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2725.736760] RSP: 002b:00007fef99cce188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2725.737267] RAX: ffffffffffffffda RBX: 00007fef9c86bf60 RCX: 00007fef9c758b19
[ 2725.737742] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2725.738247] RBP: 00007fef99cce1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2725.738763] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2725.739275] R13: 00007ffc5d6b332f R14: 00007fef99cce300 R15: 0000000000022000
[ 2725.739797]  </TASK>
[ 2725.756013] FAULT_INJECTION: forcing a failure.
[ 2725.756013] name failslab, interval 1, probability 0, space 0, times 0
[ 2725.757166] CPU: 1 PID: 12435 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2725.757241] FAULT_INJECTION: forcing a failure.
[ 2725.757241] name failslab, interval 1, probability 0, space 0, times 0
[ 2725.757706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2725.757717] Call Trace:
[ 2725.757722]  <TASK>
[ 2725.757728]  dump_stack_lvl+0x8f/0xb7
[ 2725.757747]  should_fail_ex.cold+0x5/0xa
[ 2725.757774]  should_failslab+0x9/0x20
[ 2725.757795]  __kmem_cache_alloc_node+0x5b/0x400
[ 2725.757815]  ? iter_file_splice_write+0x169/0xcb0
[ 2725.757839]  ? iter_file_splice_write+0x169/0xcb0
[ 2725.757859]  __kmalloc+0x46/0xc0
[ 2725.757882]  iter_file_splice_write+0x169/0xcb0
[ 2725.757901]  ? generic_file_read_iter+0x330/0x550
[ 2725.757935]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2725.757956]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2725.757977]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2725.758001]  ? inode_security+0x105/0x140
[ 2725.758033]  ? security_file_permission+0xb5/0xe0
[ 2725.764522]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2725.764908]  direct_splice_actor+0x113/0x180
[ 2725.765245]  splice_direct_to_actor+0x33a/0x8c0
[ 2725.765593]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2725.765964]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2725.766343]  ? security_file_permission+0xb5/0xe0
[ 2725.766719]  do_splice_direct+0x1bc/0x290
[ 2725.767027]  ? __pfx_do_splice_direct+0x10/0x10
[ 2725.767379]  ? lock_is_held_type+0xdb/0x130
[ 2725.767719]  do_sendfile+0xb1d/0x1280
[ 2725.768006]  ? __pfx_do_sendfile+0x10/0x10
[ 2725.768341]  __x64_sys_sendfile64+0x248/0x2a0
[ 2725.768675]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2725.769042]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2725.769425]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2725.769821]  do_syscall_64+0x3f/0x90
[ 2725.770102]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2725.770506] RIP: 0033:0x7f9d53ef4b19
[ 2725.770785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2725.772078] RSP: 002b:00007f9d5146a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2725.772623] RAX: ffffffffffffffda RBX: 00007f9d54007f60 RCX: 00007f9d53ef4b19
[ 2725.773137] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2725.773648] RBP: 00007f9d5146a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2725.774156] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2725.774670] R13: 00007ffffa87375f R14: 00007f9d5146a300 R15: 0000000000022000
[ 2725.775191]  </TASK>
[ 2725.775371] CPU: 0 PID: 12430 Comm: syz-executor.1 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2725.776439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2725.777572] Call Trace:
[ 2725.777918]  <TASK>
[ 2725.778229]  dump_stack_lvl+0x8f/0xb7
[ 2725.778758]  should_fail_ex.cold+0x5/0xa
[ 2725.779315]  should_failslab+0x9/0x20
[ 2725.779838]  __kmem_cache_alloc_node+0x5b/0x400
[ 2725.780459]  ? iter_file_splice_write+0x169/0xcb0
[ 2725.781107]  ? iter_file_splice_write+0x169/0xcb0
[ 2725.781748]  __kmalloc+0x46/0xc0
[ 2725.782221]  iter_file_splice_write+0x169/0xcb0
[ 2725.782855]  ? generic_file_read_iter+0x330/0x550
[ 2725.783521]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2725.784180]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2725.784859]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2725.785570]  ? inode_security+0x105/0x140
[ 2725.786147]  ? security_file_permission+0xb5/0xe0
[ 2725.786811]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2725.787500]  direct_splice_actor+0x113/0x180
[ 2725.788098]  splice_direct_to_actor+0x33a/0x8c0
[ 2725.788725]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2725.789389]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2725.790066]  ? security_file_permission+0xb5/0xe0
[ 2725.790741]  do_splice_direct+0x1bc/0x290
[ 2725.791292]  ? __pfx_do_splice_direct+0x10/0x10
[ 2725.791922]  ? lock_is_held_type+0xdb/0x130
[ 2725.792514]  do_sendfile+0xb1d/0x1280
[ 2725.793063]  ? __pfx_do_sendfile+0x10/0x10
[ 2725.793662]  __x64_sys_sendfile64+0x248/0x2a0
[ 2725.794265]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2725.794930]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2725.795621]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2725.796321]  do_syscall_64+0x3f/0x90
[ 2725.796826]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2725.797516] RIP: 0033:0x7f617dc03b19
[ 2725.798005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2725.800277] RSP: 002b:00007f617b179188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2725.801253] RAX: ffffffffffffffda RBX: 00007f617dd16f60 RCX: 00007f617dc03b19
[ 2725.802152] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2725.803059] RBP: 00007f617b1791d0 R08: 0000000000000000 R09: 0000000000000000
[ 2725.803959] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2725.804865] R13: 00007ffc401d28bf R14: 00007f617b179300 R15: 0000000000022000
[ 2725.805798]  </TASK>
20:42:15 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 6)

[ 2725.861261] FAULT_INJECTION: forcing a failure.
[ 2725.861261] name failslab, interval 1, probability 0, space 0, times 0
[ 2725.863016] CPU: 0 PID: 12442 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2725.864152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2725.865156] Call Trace:
[ 2725.865497]  <TASK>
[ 2725.865800]  dump_stack_lvl+0x8f/0xb7
[ 2725.866312]  should_fail_ex.cold+0x5/0xa
[ 2725.866876]  should_failslab+0x9/0x20
[ 2725.867383]  __kmem_cache_alloc_node+0x5b/0x400
[ 2725.867976]  ? iter_file_splice_write+0x169/0xcb0
[ 2725.868601]  ? iter_file_splice_write+0x169/0xcb0
[ 2725.869228]  __kmalloc+0x46/0xc0
[ 2725.869690]  iter_file_splice_write+0x169/0xcb0
[ 2725.870289]  ? generic_file_read_iter+0x330/0x550
[ 2725.870935]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2725.871579]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2725.872233]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2725.872918]  ? inode_security+0x105/0x140
[ 2725.873480]  ? security_file_permission+0xb5/0xe0
[ 2725.874111]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2725.874778]  direct_splice_actor+0x113/0x180
[ 2725.875356]  splice_direct_to_actor+0x33a/0x8c0
[ 2725.875956]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2725.876592]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2725.877250]  ? security_file_permission+0xb5/0xe0
[ 2725.877883]  do_splice_direct+0x1bc/0x290
[ 2725.878424]  ? __pfx_do_splice_direct+0x10/0x10
[ 2725.879055]  ? lock_is_held_type+0xdb/0x130
[ 2725.879642]  do_sendfile+0xb1d/0x1280
[ 2725.880166]  ? __pfx_do_sendfile+0x10/0x10
[ 2725.880740]  __x64_sys_sendfile64+0x248/0x2a0
[ 2725.881327]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2725.881965]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2725.882636]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2725.883315]  do_syscall_64+0x3f/0x90
[ 2725.883802]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2725.884468] RIP: 0033:0x7fa0e98b7b19
[ 2725.884941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2725.887134] RSP: 002b:00007fa0e6e2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2725.888067] RAX: ffffffffffffffda RBX: 00007fa0e99caf60 RCX: 00007fa0e98b7b19
[ 2725.888958] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2725.889831] RBP: 00007fa0e6e2d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2725.890721] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2725.891603] R13: 00007ffcecfd564f R14: 00007fa0e6e2d300 R15: 0000000000022000
[ 2725.892502]  </TASK>
[ 2725.903768] syz-executor.7: attempt to access beyond end of device
[ 2725.903768] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2725.905302] Buffer I/O error on dev loop7, logical block 10, lost async page write
20:42:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2)

[ 2725.973262] syz-executor.6: attempt to access beyond end of device
[ 2725.973262] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2725.974394] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2726.006358] loop0: detected capacity change from 0 to 40
20:42:16 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 5)

20:42:16 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 5)

20:42:16 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 6)

[ 2726.156034] syz-executor.3: attempt to access beyond end of device
[ 2726.156034] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.157197] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2726.159250] loop6: detected capacity change from 0 to 40
20:42:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 6)

[ 2726.211291] loop4: detected capacity change from 0 to 40
[ 2726.230110] loop7: detected capacity change from 0 to 40
20:42:16 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 7)

[ 2726.303297] FAULT_INJECTION: forcing a failure.
[ 2726.303297] name failslab, interval 1, probability 0, space 0, times 0
[ 2726.304310] CPU: 1 PID: 12455 Comm: syz-executor.7 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2726.304862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2726.305407] Call Trace:
[ 2726.305588]  <TASK>
[ 2726.305750]  dump_stack_lvl+0x8f/0xb7
[ 2726.306025]  should_fail_ex.cold+0x5/0xa
[ 2726.306332]  should_failslab+0x9/0x20
[ 2726.306616]  __kmem_cache_alloc_node+0x5b/0x400
[ 2726.306943]  ? iter_file_splice_write+0x169/0xcb0
[ 2726.307285]  ? iter_file_splice_write+0x169/0xcb0
[ 2726.307621]  __kmalloc+0x46/0xc0
[ 2726.307871]  iter_file_splice_write+0x169/0xcb0
[ 2726.308204]  ? generic_file_read_iter+0x330/0x550
[ 2726.308559]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2726.308911]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2726.309267]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2726.309633]  ? inode_security+0x105/0x140
[ 2726.309958]  ? security_file_permission+0xb5/0xe0
[ 2726.310300]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2726.310689]  direct_splice_actor+0x113/0x180
[ 2726.311001]  splice_direct_to_actor+0x33a/0x8c0
[ 2726.311328]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2726.311671]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2726.312029]  ? security_file_permission+0xb5/0xe0
[ 2726.312388]  do_splice_direct+0x1bc/0x290
[ 2726.312683]  ? __pfx_do_splice_direct+0x10/0x10
[ 2726.313023]  ? lock_is_held_type+0xdb/0x130
[ 2726.313339]  do_sendfile+0xb1d/0x1280
[ 2726.313636]  ? __pfx_do_sendfile+0x10/0x10
[ 2726.313956]  __x64_sys_sendfile64+0x248/0x2a0
[ 2726.314277]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2726.314639]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2726.315032]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2726.315399]  do_syscall_64+0x3f/0x90
[ 2726.315687]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2726.316051] RIP: 0033:0x7fb6bd47cb19
[ 2726.316322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2726.317516] RSP: 002b:00007fb6ba9f2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2726.318043] RAX: ffffffffffffffda RBX: 00007fb6bd58ff60 RCX: 00007fb6bd47cb19
[ 2726.318557] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2726.319044] RBP: 00007fb6ba9f21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2726.319535] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2726.320036] R13: 00007ffc22eb636f R14: 00007fb6ba9f2300 R15: 0000000000022000
[ 2726.320540]  </TASK>
[ 2726.332330] syz-executor.0: attempt to access beyond end of device
[ 2726.332330] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.333381] loop3: detected capacity change from 0 to 40
[ 2726.334054] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2726.369419] loop1: detected capacity change from 0 to 40
[ 2726.392927] syz-executor.6: attempt to access beyond end of device
[ 2726.392927] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.394141] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2726.423199] syz-executor.4: attempt to access beyond end of device
[ 2726.423199] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.424242] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2726.459409] syz-executor.3: attempt to access beyond end of device
[ 2726.459409] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.460736] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:42:16 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 6)

20:42:16 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 7)

[ 2726.525000] loop7: detected capacity change from 0 to 40
[ 2726.594431] syz-executor.1: attempt to access beyond end of device
[ 2726.594431] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.595901] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2726.618165] syz-executor.7: attempt to access beyond end of device
[ 2726.618165] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.620019] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2726.623854] loop0: detected capacity change from 0 to 40
[ 2726.757356] syz-executor.0: attempt to access beyond end of device
[ 2726.757356] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.758405] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:42:30 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 6)

20:42:30 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 8)

20:42:30 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:42:30 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 7)

20:42:30 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 8)

20:42:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

20:42:30 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 7)

20:42:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 7)

[ 2740.176183] loop5: detected capacity change from 0 to 40
[ 2740.178118] loop4: detected capacity change from 0 to 40
[ 2740.180838] loop6: detected capacity change from 0 to 40
[ 2740.184526] FAT-fs (loop5): invalid media value (0x00)
[ 2740.184952] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2740.189046] loop3: detected capacity change from 0 to 40
[ 2740.212147] loop7: detected capacity change from 0 to 40
[ 2740.242901] loop1: detected capacity change from 0 to 40
[ 2740.251638] loop0: detected capacity change from 0 to 40
[ 2740.336084] syz-executor.4: attempt to access beyond end of device
[ 2740.336084] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2740.338000] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2740.387262] syz-executor.6: attempt to access beyond end of device
[ 2740.387262] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2740.388737] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2740.423405] syz-executor.3: attempt to access beyond end of device
[ 2740.423405] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2740.424841] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2740.433321] syz-executor.7: attempt to access beyond end of device
[ 2740.433321] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2740.434774] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2740.450414] syz-executor.0: attempt to access beyond end of device
[ 2740.450414] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2740.451781] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:42:30 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 8)

[ 2740.489156] syz-executor.1: attempt to access beyond end of device
[ 2740.489156] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2740.490299] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2740.503329] loop4: detected capacity change from 0 to 40
20:42:30 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 7)

20:42:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8)

20:42:30 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 9)

20:42:30 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 8)

20:42:30 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 9)

[ 2740.674429] syz-executor.4: attempt to access beyond end of device
[ 2740.674429] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2740.676034] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2740.711866] loop1: detected capacity change from 0 to 40
[ 2740.720290] loop3: detected capacity change from 0 to 40
[ 2740.722690] loop6: detected capacity change from 0 to 40
[ 2740.726776] loop0: detected capacity change from 0 to 40
[ 2740.755104] loop7: detected capacity change from 0 to 40
20:42:30 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 9)

[ 2740.886374] syz-executor.7: attempt to access beyond end of device
[ 2740.886374] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2740.887731] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2740.930193] syz-executor.0: attempt to access beyond end of device
[ 2740.930193] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2740.931704] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:42:31 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 9)

[ 2740.940743] syz-executor.3: attempt to access beyond end of device
[ 2740.940743] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2740.941903] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2740.989194] loop4: detected capacity change from 0 to 40
[ 2741.014684] loop7: detected capacity change from 0 to 40
20:42:45 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 10)

20:42:45 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 8)

20:42:45 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 10)

20:42:45 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9)

20:42:45 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 10)

20:42:45 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 10)

20:42:45 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2755.159878] loop0: detected capacity change from 0 to 40
[ 2755.163077] loop6: detected capacity change from 0 to 40
[ 2755.188637] loop3: detected capacity change from 0 to 40
20:42:45 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0xa040, 0x110)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
sendmmsg$inet(r2, &(0x7f0000000040), 0x0, 0x48040)

[ 2755.198864] loop7: detected capacity change from 0 to 40
[ 2755.207106] loop5: detected capacity change from 0 to 40
[ 2755.219308] FAT-fs (loop5): invalid media value (0x00)
[ 2755.219720] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2755.250713] loop1: detected capacity change from 0 to 40
[ 2755.252362] loop4: detected capacity change from 0 to 40
[ 2755.275046] bio_check_eod: 4 callbacks suppressed
[ 2755.275060] syz-executor.0: attempt to access beyond end of device
[ 2755.275060] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.276730] buffer_io_error: 4 callbacks suppressed
[ 2755.276767] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2755.291377] syz-executor.6: attempt to access beyond end of device
[ 2755.291377] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.292430] Buffer I/O error on dev loop6, logical block 10, lost async page write
20:42:45 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 9)

[ 2755.428300] syz-executor.1: attempt to access beyond end of device
[ 2755.428300] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.429380] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2755.496107] syz-executor.3: attempt to access beyond end of device
[ 2755.496107] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.497157] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2755.510214] loop6: detected capacity change from 0 to 40
20:42:45 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 11)

20:42:45 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10)

20:42:45 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 11)

[ 2755.615847] syz-executor.6: attempt to access beyond end of device
[ 2755.615847] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.617009] Buffer I/O error on dev loop6, logical block 10, lost async page write
20:42:45 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 10)

[ 2755.711086] loop1: detected capacity change from 0 to 40
[ 2755.748276] syz-executor.4: attempt to access beyond end of device
[ 2755.748276] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.753109] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2755.781266] syz-executor.7: attempt to access beyond end of device
[ 2755.781266] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.783727] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2755.792243] loop0: detected capacity change from 0 to 40
[ 2755.815268] loop6: detected capacity change from 0 to 40
20:42:45 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 11)

[ 2755.939807] loop3: detected capacity change from 0 to 40
[ 2756.009012] syz-executor.1: attempt to access beyond end of device
[ 2756.009012] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2756.011252] Buffer I/O error on dev loop1, logical block 10, lost async page write
20:42:46 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 11)

[ 2756.086697] loop4: detected capacity change from 0 to 40
[ 2756.118973] syz-executor.0: attempt to access beyond end of device
[ 2756.118973] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2756.120978] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:42:46 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11)

[ 2756.184384] syz-executor.6: attempt to access beyond end of device
[ 2756.184384] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2756.185788] Buffer I/O error on dev loop6, logical block 10, lost async page write
20:42:46 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2756.247002] loop1: detected capacity change from 0 to 40
[ 2756.247173] loop7: detected capacity change from 0 to 40
[ 2756.357907] loop5: detected capacity change from 0 to 40
[ 2756.366515] FAT-fs (loop5): bogus number of FAT sectors
[ 2756.366994] FAT-fs (loop5): Can't find a valid FAT filesystem
20:42:59 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:42:59 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 12)

20:42:59 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 12)

20:42:59 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 11)

20:42:59 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 12)

20:42:59 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 12)

[ 2769.804749] loop1: detected capacity change from 0 to 40
20:42:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
syncfs(r1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

20:42:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12)

[ 2769.808341] loop3: detected capacity change from 0 to 40
[ 2769.827083] loop4: detected capacity change from 0 to 40
[ 2769.845909] loop5: detected capacity change from 0 to 40
[ 2769.856927] loop7: detected capacity change from 0 to 40
[ 2769.877272] loop6: detected capacity change from 0 to 40
[ 2769.888949] FAT-fs (loop5): bogus number of FAT sectors
[ 2769.889917] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2769.892783] loop0: detected capacity change from 0 to 40
[ 2769.959088] bio_check_eod: 4 callbacks suppressed
[ 2769.959102] syz-executor.1: attempt to access beyond end of device
[ 2769.959102] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2769.961078] buffer_io_error: 4 callbacks suppressed
[ 2769.961087] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2769.982324] syz-executor.3: attempt to access beyond end of device
[ 2769.982324] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2769.983666] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2770.033508] syz-executor.4: attempt to access beyond end of device
[ 2770.033508] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2770.036066] Buffer I/O error on dev loop4, logical block 10, lost async page write
20:43:00 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 13)

20:43:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 13)

[ 2770.148065] syz-executor.7: attempt to access beyond end of device
[ 2770.148065] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2770.149197] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2770.172306] syz-executor.6: attempt to access beyond end of device
[ 2770.172306] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2770.173383] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2770.207123] syz-executor.0: attempt to access beyond end of device
[ 2770.207123] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2770.208946] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:43:00 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 13)

20:43:00 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 13)

[ 2770.375289] loop3: detected capacity change from 0 to 40
20:43:00 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 12)

[ 2770.408829] loop4: detected capacity change from 0 to 40
[ 2770.421139] loop1: detected capacity change from 0 to 40
[ 2770.463254] loop7: detected capacity change from 0 to 40
20:43:00 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 13)

[ 2770.514836] FAULT_INJECTION: forcing a failure.
[ 2770.514836] name failslab, interval 1, probability 0, space 0, times 0
[ 2770.516964] CPU: 0 PID: 12576 Comm: syz-executor.3 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2770.518056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2770.519179] Call Trace:
[ 2770.519541]  <TASK>
[ 2770.519863]  dump_stack_lvl+0x8f/0xb7
[ 2770.520410]  should_fail_ex.cold+0x5/0xa
[ 2770.520998]  should_failslab+0x9/0x20
[ 2770.521529]  __kmem_cache_alloc_node+0x5b/0x400
[ 2770.522180]  ? iter_file_splice_write+0x169/0xcb0
[ 2770.522857]  ? iter_file_splice_write+0x169/0xcb0
[ 2770.523518]  __kmalloc+0x46/0xc0
[ 2770.524023]  iter_file_splice_write+0x169/0xcb0
[ 2770.524667]  ? generic_file_read_iter+0x330/0x550
[ 2770.525361]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2770.526060]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2770.526780]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2770.527550]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2770.528182]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2770.528928]  ? do_splice_to+0x141/0x240
[ 2770.529471]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2770.530169]  direct_splice_actor+0x113/0x180
[ 2770.530794]  splice_direct_to_actor+0x33a/0x8c0
[ 2770.531455]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2770.532135]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2770.532834]  ? security_file_permission+0xb5/0xe0
[ 2770.533509]  do_splice_direct+0x1bc/0x290
[ 2770.534081]  ? __pfx_do_splice_direct+0x10/0x10
[ 2770.534739]  ? lock_is_held_type+0xdb/0x130
[ 2770.535385]  do_sendfile+0xb1d/0x1280
[ 2770.535978]  ? __pfx_do_sendfile+0x10/0x10
[ 2770.536616]  __x64_sys_sendfile64+0x248/0x2a0
[ 2770.537260]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2770.537962]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2770.538695]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2770.539474]  do_syscall_64+0x3f/0x90
[ 2770.540004]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2770.540755] RIP: 0033:0x7fec36e98b19
[ 2770.541278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2770.543733] RSP: 002b:00007fec3440e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2770.544777] RAX: ffffffffffffffda RBX: 00007fec36fabf60 RCX: 00007fec36e98b19
[ 2770.545741] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2770.546704] RBP: 00007fec3440e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2770.547677] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2770.548649] R13: 00007ffdd9d0783f R14: 00007fec3440e300 R15: 0000000000022000
[ 2770.549648]  </TASK>
[ 2770.554399] FAULT_INJECTION: forcing a failure.
[ 2770.554399] name failslab, interval 1, probability 0, space 0, times 0
[ 2770.556701] CPU: 1 PID: 12578 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2770.557859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2770.559081] Call Trace:
[ 2770.559423]  <TASK>
[ 2770.559727]  dump_stack_lvl+0x8f/0xb7
[ 2770.560240]  should_fail_ex.cold+0x5/0xa
[ 2770.560797]  should_failslab+0x9/0x20
[ 2770.561312]  __kmem_cache_alloc_node+0x5b/0x400
[ 2770.561935]  ? iter_file_splice_write+0x169/0xcb0
[ 2770.562588]  ? iter_file_splice_write+0x169/0xcb0
[ 2770.563241]  __kmalloc+0x46/0xc0
[ 2770.563716]  iter_file_splice_write+0x169/0xcb0
[ 2770.564324]  ? generic_file_read_iter+0x330/0x550
[ 2770.564992]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2770.565648]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2770.566328]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2770.567049]  ? inode_security+0x105/0x140
[ 2770.567630]  ? security_file_permission+0xb5/0xe0
[ 2770.568271]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2770.568948]  direct_splice_actor+0x113/0x180
[ 2770.569538]  splice_direct_to_actor+0x33a/0x8c0
[ 2770.570155]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2770.570809]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2770.571493]  ? security_file_permission+0xb5/0xe0
[ 2770.572174]  do_splice_direct+0x1bc/0x290
[ 2770.572786]  ? __pfx_do_splice_direct+0x10/0x10
[ 2770.573418]  ? lock_is_held_type+0xdb/0x130
[ 2770.574008]  do_sendfile+0xb1d/0x1280
[ 2770.574546]  ? __pfx_do_sendfile+0x10/0x10
[ 2770.575137]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2770.575926]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2770.576684]  __x64_sys_sendfile64+0x248/0x2a0
[ 2770.577417]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2770.578114]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2770.578796]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2770.579509]  do_syscall_64+0x3f/0x90
[ 2770.580012]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2770.580710] RIP: 0033:0x7fa0e98b7b19
[ 2770.581198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2770.581853] loop6: detected capacity change from 0 to 40
[ 2770.583449] RSP: 002b:00007fa0e6e2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2770.583485] RAX: ffffffffffffffda RBX: 00007fa0e99caf60 RCX: 00007fa0e98b7b19
[ 2770.586026] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2770.586925] RBP: 00007fa0e6e2d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2770.587852] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2770.588755] R13: 00007ffcecfd564f R14: 00007fa0e6e2d300 R15: 0000000000022000
[ 2770.589394] FAULT_INJECTION: forcing a failure.
[ 2770.589394] name failslab, interval 1, probability 0, space 0, times 0
[ 2770.590994]  </TASK>
[ 2770.591756] CPU: 0 PID: 12582 Comm: syz-executor.7 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2770.592909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2770.594122] Call Trace:
[ 2770.594503]  <TASK>
[ 2770.594831]  dump_stack_lvl+0x8f/0xb7
[ 2770.595395]  should_fail_ex.cold+0x5/0xa
[ 2770.595989]  ? ext4_init_io_end+0x27/0x180
[ 2770.596595]  should_failslab+0x9/0x20
[ 2770.597156]  kmem_cache_alloc+0x5a/0x410
[ 2770.597756]  ext4_init_io_end+0x27/0x180
[ 2770.598343]  ext4_writepages+0xc84/0x36c0
[ 2770.598958]  ? __stack_depot_save+0x3e/0x4e0
[ 2770.599633]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 2770.600296]  ? mark_lock.part.0+0xef/0x2f70
[ 2770.600914]  ? __pfx_ext4_writepages+0x10/0x10
[ 2770.601575]  ? kasan_quarantine_put+0xa5/0x1f0
[ 2770.602220]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 2770.602939]  ? __lock_acquire+0xbad/0x5e70
[ 2770.603578]  ? __pfx___lock_acquire+0x10/0x10
[ 2770.604214]  ? __lock_acquire+0xbad/0x5e70
[ 2770.604827]  ? __pfx_ext4_writepages+0x10/0x10
[ 2770.605460]  do_writepages+0x1b4/0x6a0
[ 2770.606015]  ? __pfx_do_writepages+0x10/0x10
[ 2770.606637]  ? lock_release+0x3b6/0x750
[ 2770.607228]  ? wbc_attach_and_unlock_inode+0x44d/0x8d0
[ 2770.607957]  ? __pfx_lock_release+0x10/0x10
[ 2770.608564]  ? __pfx_lock_release+0x10/0x10
[ 2770.609166]  ? __pfx_lock_acquire+0x10/0x10
[ 2770.609788]  ? do_raw_spin_unlock+0x53/0x220
[ 2770.610418]  ? _raw_spin_unlock+0x28/0x50
[ 2770.610998]  ? wbc_attach_and_unlock_inode+0x4a3/0x8d0
[ 2770.611765]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 2770.612406]  __filemap_fdatawrite_range+0xba/0x100
[ 2770.613106]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 2770.613899]  file_write_and_wait_range+0xd2/0x140
[ 2770.614591]  ext4_sync_file+0x221/0xfa0
[ 2770.615161]  ? __pfx_ext4_sync_file+0x10/0x10
[ 2770.615817]  vfs_fsync_range+0x141/0x230
[ 2770.616396]  ext4_buffered_write_iter+0x37d/0x460
[ 2770.617094]  ? stack_trace_save+0x90/0xd0
[ 2770.617673]  ext4_file_write_iter+0x3ff/0x1930
[ 2770.618348]  ? iter_file_splice_write+0x169/0xcb0
[ 2770.619034]  ? kasan_save_stack+0x35/0x50
[ 2770.619623]  ? kasan_save_stack+0x22/0x50
[ 2770.620210]  ? kasan_set_track+0x25/0x30
[ 2770.620800]  ? __kasan_kmalloc+0x82/0x90
[ 2770.621376]  ? __kmalloc+0x56/0xc0
[ 2770.621909]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2770.622621]  ? do_splice_direct+0x1bc/0x290
[ 2770.623258]  ? do_sendfile+0xb1d/0x1280
[ 2770.623835]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 2770.624504]  ? lock_is_held_type+0xdb/0x130
[ 2770.625144]  do_iter_readv_writev+0x211/0x3c0
[ 2770.625796]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2770.626512]  ? avc_policy_seqno+0xd/0x70
[ 2770.627119]  ? security_file_permission+0xb5/0xe0
[ 2770.627835]  do_iter_write+0x18b/0x700
[ 2770.628404]  ? lock_is_held_type+0xdb/0x130
[ 2770.629044]  vfs_iter_write+0x74/0xb0
[ 2770.629583]  iter_file_splice_write+0x73e/0xcb0
[ 2770.630265]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2770.630969]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2770.631738]  ? security_file_permission+0xb5/0xe0
[ 2770.632409]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2770.633122]  direct_splice_actor+0x113/0x180
[ 2770.633746]  splice_direct_to_actor+0x33a/0x8c0
[ 2770.634393]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2770.635080]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2770.635790]  ? security_file_permission+0xb5/0xe0
[ 2770.636468]  do_splice_direct+0x1bc/0x290
[ 2770.637048]  ? __pfx_do_splice_direct+0x10/0x10
[ 2770.637713]  ? lock_is_held_type+0xdb/0x130
[ 2770.638332]  do_sendfile+0xb1d/0x1280
[ 2770.638902]  ? __pfx_do_sendfile+0x10/0x10
[ 2770.639538]  __x64_sys_sendfile64+0x248/0x2a0
[ 2770.640165]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2770.640847]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2770.641565]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2770.642290]  do_syscall_64+0x3f/0x90
[ 2770.642816]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2770.643540] RIP: 0033:0x7fb6bd47cb19
[ 2770.644054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2770.646373] RSP: 002b:00007fb6ba9d1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2770.647381] RAX: ffffffffffffffda RBX: 00007fb6bd590020 RCX: 00007fb6bd47cb19
[ 2770.648317] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006
[ 2770.649250] RBP: 00007fb6ba9d11d0 R08: 0000000000000000 R09: 0000000000000000
[ 2770.650181] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2770.651019] loop0: detected capacity change from 0 to 40
[ 2770.651121] R13: 00007ffc22eb636f R14: 00007fb6ba9d1300 R15: 0000000000022000
[ 2770.652800]  </TASK>
[ 2770.669904] FAULT_INJECTION: forcing a failure.
[ 2770.669904] name failslab, interval 1, probability 0, space 0, times 0
[ 2770.671736] CPU: 1 PID: 12579 Comm: syz-executor.1 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2770.672801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2770.673845] Call Trace:
[ 2770.674189]  <TASK>
[ 2770.674498]  dump_stack_lvl+0x8f/0xb7
[ 2770.675047]  should_fail_ex.cold+0x5/0xa
[ 2770.675619]  should_failslab+0x9/0x20
[ 2770.676142]  __kmem_cache_alloc_node+0x5b/0x400
[ 2770.676771]  ? iter_file_splice_write+0x169/0xcb0
[ 2770.677429]  ? iter_file_splice_write+0x169/0xcb0
[ 2770.678071]  __kmalloc+0x46/0xc0
[ 2770.678558]  iter_file_splice_write+0x169/0xcb0
[ 2770.679186]  ? generic_file_read_iter+0x330/0x550
[ 2770.679850]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2770.680523]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2770.681208]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2770.681924]  ? inode_security+0x105/0x140
[ 2770.682512]  ? security_file_permission+0xb5/0xe0
[ 2770.683171]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2770.683860]  direct_splice_actor+0x113/0x180
[ 2770.684460]  splice_direct_to_actor+0x33a/0x8c0
[ 2770.685092]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2770.685758]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2770.686443]  ? security_file_permission+0xb5/0xe0
[ 2770.687122]  do_splice_direct+0x1bc/0x290
[ 2770.687688]  ? __pfx_do_splice_direct+0x10/0x10
[ 2770.688327]  ? lock_is_held_type+0xdb/0x130
[ 2770.688926]  do_sendfile+0xb1d/0x1280
[ 2770.689470]  ? __pfx_do_sendfile+0x10/0x10
[ 2770.690078]  __x64_sys_sendfile64+0x248/0x2a0
[ 2770.690850]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2770.691533]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2770.692233]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2770.692943]  do_syscall_64+0x3f/0x90
[ 2770.693448]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2770.694148] RIP: 0033:0x7f617dc03b19
[ 2770.694643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2770.697157] RSP: 002b:00007f617b179188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2770.698112] RAX: ffffffffffffffda RBX: 00007f617dd16f60 RCX: 00007f617dc03b19
[ 2770.699029] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2770.699941] RBP: 00007f617b1791d0 R08: 0000000000000000 R09: 0000000000000000
[ 2770.700847] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2770.701753] R13: 00007ffc401d28bf R14: 00007f617b179300 R15: 0000000000022000
[ 2770.702690]  </TASK>
[ 2770.719208] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value
20:43:00 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 14)

[ 2770.786890] FAULT_INJECTION: forcing a failure.
[ 2770.786890] name failslab, interval 1, probability 0, space 0, times 0
[ 2770.788779] CPU: 1 PID: 12585 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2770.789827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2770.790861] Call Trace:
[ 2770.791208]  <TASK>
[ 2770.791518]  dump_stack_lvl+0x8f/0xb7
[ 2770.792033]  should_fail_ex.cold+0x5/0xa
[ 2770.792588]  should_failslab+0x9/0x20
[ 2770.793136]  __kmem_cache_alloc_node+0x5b/0x400
[ 2770.793853]  ? iter_file_splice_write+0x169/0xcb0
[ 2770.794506]  ? iter_file_splice_write+0x169/0xcb0
[ 2770.795164]  __kmalloc+0x46/0xc0
[ 2770.795749]  iter_file_splice_write+0x169/0xcb0
[ 2770.796378]  ? generic_file_read_iter+0x330/0x550
[ 2770.797175]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2770.797866]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2770.798506]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2770.799235]  ? inode_security+0x105/0x140
[ 2770.799816]  ? security_file_permission+0xb5/0xe0
[ 2770.800469]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2770.801152]  direct_splice_actor+0x113/0x180
[ 2770.801754]  splice_direct_to_actor+0x33a/0x8c0
[ 2770.802386]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2770.803072]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2770.803866]  ? security_file_permission+0xb5/0xe0
[ 2770.804526]  do_splice_direct+0x1bc/0x290
[ 2770.805090]  ? __pfx_do_splice_direct+0x10/0x10
[ 2770.805730]  ? lock_is_held_type+0xdb/0x130
[ 2770.806329]  do_sendfile+0xb1d/0x1280
[ 2770.806887]  ? __pfx_do_sendfile+0x10/0x10
[ 2770.807518]  __x64_sys_sendfile64+0x248/0x2a0
[ 2770.808133]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2770.808794]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2770.809589]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2770.810428]  do_syscall_64+0x3f/0x90
[ 2770.811006]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2770.811720] RIP: 0033:0x7f9d53ef4b19
[ 2770.812216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2770.814474] RSP: 002b:00007f9d5146a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2770.815444] RAX: ffffffffffffffda RBX: 00007f9d54007f60 RCX: 00007f9d53ef4b19
[ 2770.816344] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2770.817236] RBP: 00007f9d5146a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2770.818137] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2770.819065] R13: 00007ffffa87375f R14: 00007f9d5146a300 R15: 0000000000022000
[ 2770.820001]  </TASK>
[ 2770.904307] loop4: detected capacity change from 0 to 40
[ 2771.170950] syz-executor.4: attempt to access beyond end of device
[ 2771.170950] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2771.173223] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2786.445240] loop6: detected capacity change from 0 to 40
20:43:16 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 14)

20:43:16 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:43:16 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 14)

20:43:16 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2786.465175] loop4: detected capacity change from 0 to 40
[ 2786.468656] loop1: detected capacity change from 0 to 40
20:43:16 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:43:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_pts(r1, 0x40000)
inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x82000000)
write$binfmt_elf64(r3, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x4, 0x3e, 0x3f, 0xaf62, 0x2, 0x6, 0x2, 0x1c3, 0x40, 0x28a, 0x81, 0xffff, 0x38, 0x2, 0x400, 0x1ff, 0x3}, [{0x6, 0x5, 0xfffffffffffffff8, 0x87, 0x9, 0x0, 0x0, 0x9}], "c3724bbe5f0195c8acfbd157c9948cacf08785b5ee0ec12fd4ad73d18b86c5df1b8ea094fd8dc59279b4e560004c3e734c116ec278c55983d17667c569676fe47b16c134fe93ab3092c1985268f35b49947594aeffce04b63c1d6c7701988f50c78455da1a45a81edd3a484a6ba64eca02dceeb89c34adfdcbc93cc484988869e4cfe1bace3e1c7e44e8e521c69f10123ea1e461de09ed789ed5eb1a9550d3ab2c55fbe76e7a7d8c96820a7921d3b13d624ebff57bf1fc96d9031173dc71addb88ce93f249f8007a10202e5390d3b860", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x748)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

20:43:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 14)

20:43:16 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 15)

[ 2786.475073] loop3: detected capacity change from 0 to 40
[ 2786.479044] loop5: detected capacity change from 0 to 40
[ 2786.485968] FAT-fs (loop5): bogus number of FAT sectors
[ 2786.486339] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2786.488766] loop7: detected capacity change from 0 to 40
[ 2786.490908] loop0: detected capacity change from 0 to 40
[ 2786.595392] syz-executor.4: attempt to access beyond end of device
[ 2786.595392] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2786.596421] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2786.642237] syz-executor.6: attempt to access beyond end of device
[ 2786.642237] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2786.643294] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2786.644633] syz-executor.1: attempt to access beyond end of device
[ 2786.644633] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2786.645766] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2786.654174] syz-executor.7: attempt to access beyond end of device
[ 2786.654174] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2786.655276] Buffer I/O error on dev loop7, logical block 10, lost async page write
20:43:16 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 16)

[ 2786.691863] syz-executor.3: attempt to access beyond end of device
[ 2786.691863] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2786.693052] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2786.702371] syz-executor.0: attempt to access beyond end of device
[ 2786.702371] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2786.703782] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2786.726429] loop4: detected capacity change from 0 to 40
20:43:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 15)

20:43:16 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2802}], 0x82010, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
r5 = creat(&(0x7f0000000180)='./file0\x00', 0x30)
move_mount(r5, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2786.785918] syz-executor.4: attempt to access beyond end of device
[ 2786.785918] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2786.787087] Buffer I/O error on dev loop4, logical block 10, lost async page write
20:43:16 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:43:16 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 15)

20:43:16 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 15)

[ 2786.835083] loop6: detected capacity change from 0 to 40
[ 2786.855324] loop3: detected capacity change from 0 to 40
20:43:16 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 17)

[ 2786.889982] loop1: detected capacity change from 0 to 40
[ 2786.910308] loop7: detected capacity change from 0 to 40
[ 2786.923617] loop4: detected capacity change from 0 to 40
[ 2786.931758] loop0: detected capacity change from 0 to 40
[ 2786.956128] syz-executor.3: attempt to access beyond end of device
[ 2786.956128] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2786.957373] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:43:17 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 16)

[ 2787.018812] syz-executor.7: attempt to access beyond end of device
[ 2787.018812] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2787.020059] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2787.048850] syz-executor.4: attempt to access beyond end of device
[ 2787.048850] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2787.050231] Buffer I/O error on dev loop4, logical block 10, lost async page write
20:43:17 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 18)

[ 2787.108251] loop3: detected capacity change from 0 to 40
20:43:17 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0)
fallocate(r5, 0x8, 0x0, 0x8000)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x8, 0x6, 0x6})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2787.261407] loop4: detected capacity change from 0 to 40
[ 2787.275260] loop7: detected capacity change from 0 to 40
20:43:17 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 16)

[ 2787.403171] loop0: detected capacity change from 0 to 40
[ 2787.676880] loop6: detected capacity change from 0 to 40
20:43:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 16)

20:43:30 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 17)

20:43:30 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000400)=ANY=[@ANYBLOB="030302000000050081799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b643946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b96307598cd29888e6de430bbbae65b77a7d79023a83c0ecee474cf1371a78f273567fee6c915460b8551e22c40ab4c2c5e67899dcf93e5bf122d817c300d9dc26931bfe4b3fc7bead3239b844afbc201ffa2128a6aaece618c4e2016836b18e87b7773528ad780f366a67f6885c3e896a201ef4707e66f53bb623113"], 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file0\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000500)={"1ef29f3fdf19ca5ade8f1608209f2d28", 0x0, 0x0, {0x9, 0x48}, {0x0, 0x3}, 0x101, [0x3, 0x6, 0x52c, 0x5, 0x100, 0x401, 0x2, 0x0, 0x1, 0x3, 0x2, 0x1, 0x2800000000000000, 0x1f, 0xfffffffffffffffb, 0x4]})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

20:43:30 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 17)

20:43:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r0, &(0x7f0000000040)='./file1\x00', 0xa0800, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2800.584829] loop4: detected capacity change from 0 to 40
20:43:30 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 19)

20:43:30 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:43:30 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2800.606476] loop7: detected capacity change from 0 to 40
[ 2800.608569] loop5: detected capacity change from 0 to 40
[ 2800.639319] loop6: detected capacity change from 0 to 40
[ 2800.655929] loop3: detected capacity change from 0 to 40
[ 2800.681013] loop0: detected capacity change from 0 to 40
[ 2800.684537] loop1: detected capacity change from 0 to 40
[ 2800.729351] bio_check_eod: 6 callbacks suppressed
[ 2800.729375] syz-executor.4: attempt to access beyond end of device
[ 2800.729375] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2800.732889] buffer_io_error: 6 callbacks suppressed
[ 2800.732908] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2800.757397] syz-executor.6: attempt to access beyond end of device
[ 2800.757397] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2800.758718] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2800.846746] syz-executor.7: attempt to access beyond end of device
[ 2800.846746] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2800.848773] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2800.855399] syz-executor.6: attempt to access beyond end of device
[ 2800.855399] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2800.857137] Buffer I/O error on dev loop6, logical block 31, lost async page write
20:43:30 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 20)

[ 2800.873207] syz-executor.1: attempt to access beyond end of device
[ 2800.873207] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2800.874376] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2800.900974] syz-executor.7: attempt to access beyond end of device
[ 2800.900974] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2800.901984] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2800.940529] loop4: detected capacity change from 0 to 40
20:43:31 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 17)

[ 2800.993073] syz-executor.0: attempt to access beyond end of device
[ 2800.993073] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2800.995990] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2801.082308] syz-executor.3: attempt to access beyond end of device
[ 2801.082308] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2801.082457] syz-executor.4: attempt to access beyond end of device
[ 2801.082457] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2801.083360] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2801.085067] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2801.103254] loop1: detected capacity change from 0 to 40
[ 2801.416967] syz-executor.1: attempt to access beyond end of device
[ 2801.416967] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2801.419874] Buffer I/O error on dev loop1, logical block 10, lost async page write
20:43:48 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 18)

20:43:48 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x6, 0x5, &(0x7f0000000780)=[{&(0x7f0000000480)="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", 0xfe, 0xf832}, {&(0x7f0000000580)="377bfbbc413e716918fc61fa846ab34bc4d33a02358609921c9b30ade4760be9f35e8c316c4588026b7043a7c0", 0x2d, 0x2}, {&(0x7f00000005c0)="5d48b95e7724b4f14d3e47af864ce4e93177fce64385f63892e8d4b3256a10773b8135db6e7a08fd3217c3da662343badabe1199948e25e3a6770d7124a3867019791e8c49fdf1", 0x47, 0x1000}, {&(0x7f0000000640)="c0981bff1e5d743f4b3edb482b301f32a57e2a43308948b6d8c174461717d5edce44ce24f5fbc690097ca74c799faa030d5df801c1098a262620119f1f8e5e34b7f795c711a451e2500b27861912f2884b659b886cd8c6c72ab2d9aebda8850a6ffedf94a32071332408c538307355e6a267c668bc9def180286463bbf830fcaad9022cd3eabf830f2bda8060b7a20e2eed8b6d5bd45561d2290c2160cb32633c014b97fcbb7e41e654fe5662d1cbbcffe97e0623d5c5c0b7b2fb7f16bed45e7558625", 0xc3, 0x7}, {&(0x7f0000000740)="55b853a8da2f5130f5df83dd43a89b24", 0x10, 0x7f}], 0xb800, &(0x7f0000000800)={[{@sysvgroups}, {@data_writeback}, {@norecovery}, {@data_writeback}], [{@obj_role={'obj_role', 0x3d, '}'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]})
r2 = openat(r1, &(0x7f0000000400)='./file1\x00', 0x0, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r5, r2, 0x0, 0xfffffdef)

20:43:48 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:43:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x884018, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f00000009c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x3, 0xfffffffc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0)
fallocate(r4, 0x8, 0x0, 0x8000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYRES64, @ANYRES16=r5, @ANYRESDEC=r4], 0xffffffffffffff88)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(r5, &(0x7f0000000900)=[{&(0x7f0000000040)="972ffc8af113628e774e62fd5e2a8287debe7422e670f00ebc20c9edad32a5a4750cd3b4", 0x24}, {&(0x7f0000000180)="063e2560a51d00f6c9237b434405af81c1367ec75c762b25b7515a7e05259e865f4473fcd26590b885f4de6b432e1ef7fe18ad2bd4ec8219bf7e6b61c8b2c6", 0x3f}, {&(0x7f00000001c0)}, {&(0x7f0000000400)="b93947106a727d752819d2ff2ceb7f3d023235a43ef229756e3d98fac8699a679edbbf61a069fda422eed69c50c1cd2730c19278216b3faa52c8f25ab0fee137a31597b1423d63cc29063bc3e5eb39eab43c03755aa13b", 0x57}, {&(0x7f0000000480)="983588b4f9d25d0d39bee0a4477d9e0a2b01240f68d4dfa7e18593d5372a63214d0b3e9a1c0ea732f2ab8cb4024c2860f4903f9947b51c35b178e3393bcfd3d7634275fe360c4d49578af643f0e2a8cb8b409cead45d8d7bbe538d0a8d02fbe940cdb939a9ce241ac2b537db40e99da44e9e7662ae24cf83ecb27c672a21ecf283d77cd2cc47abf1078fcaa285520dcb2c9868d251ad5c", 0x97}, {&(0x7f0000000540)="e33b7eb57f34fa4172dc4857b9cde5ccebaafeecd527a37008bc3a2e5b29df596f69fac9c09059f093bf393a3fbe63323473e20adfb047ed72d0451159b8d59c45d221e128d86247c6424b33e59ce2b743cfff69bf30f0f2910376103b155a502bbbbd1845dd398643088e8eb3afc34dc063f06ad216efc48ef544d0a0271b6b2465d3c87106229762120afa6e765f951636cc03713ab53842a61b90364eececba958a44cb516f0ede211bbd5083120060a2c0d1c488e19fc8e87d01c0fd8f9dc1e59a971e1a3c89dff3716fcb3e3ebe92a2c955741e514c29e2", 0xda}, {&(0x7f0000000640)="29afbe6265619a0e737b6a2b0ec6606bd5a1fe1d4125335592da1173d4cd3d463e159ebfc72d76657059a4e7cacfb0d7df178599585e64266f43b6613cc9f68a5e715ad9bf5f7bd0142ee1956862572e51f303d5b2ae00784251906f5b1baf656575b58cb37807a865108c616fa2aaa1123dca7bb01650001fd77bf4f11638b6fe5c6023a597b22f7eef7c73165b2f498225c5c2a830e53217dd6571c24591c1e954013fead85ea86a10b82e295de3ac5f88bbd5220af6b648a272592f3a3abb01ee810156e01fcb6394663723", 0xcd}, {&(0x7f0000000740)="ce002f2a1e61b44b061454fa170ccff954f96da29bc218685cbd6954c2badb0ff9bc7042096239a2491b609947c85117adc4d193c9cc2d76c22a90e645f0332bbfd43c7265b18afa0203ba0473c4e2961d4e84385910f80bb8d44f10aae11a879ec80ce1afaad542f1b0f68ebb285d2c9632a590265b594e673dfcf00b0aee104c14a83619a8fd1f1eb3a444448d31da1a03706affd39af3fb19cd633ca2c7a06cf5405712", 0xa5}, {&(0x7f0000000800)="d5fd785fb21cfe3a48ec2106f9659584fa6149573d49d0059bcb470b21916ddad3eff739ad44b75929dc942fbd71f1758b087125aafd8550241c887521f4b70fef588388743ab79b82fcce8ef70332ce198f69b5a5621fd79eb8325001bfa04fbc56266aad3419d4001e2beae737a692858c585c89a6c07fbda2b9d09206942e58214c5f99935a022a65e1d615d1d43fc4e17d73a34237c77642da0860cd3e672cfb6c3602d6278217ac8fd1fda97cdc6a11e2dc1f311466a81dae27f82ad580ec579d378eaba218173b8af17c47c8ef7f7a8f", 0xd3}], 0x9, 0x0, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2818.072181] loop5: detected capacity change from 0 to 40
[ 2818.084559] loop4: detected capacity change from 0 to 40
20:43:48 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 21)

20:43:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 18)

20:43:48 executing program 6:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x3)
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0)
fallocate(r5, 0x8, 0x0, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb6e}}, './file1\x00'})
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:43:48 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 18)

[ 2818.092875] loop6: detected capacity change from 0 to 40
[ 2818.108807] loop3: detected capacity change from 0 to 40
[ 2818.110002] loop1: detected capacity change from 0 to 40
[ 2818.128234] loop7: detected capacity change from 0 to 40
[ 2818.134212] loop0: detected capacity change from 0 to 40
[ 2818.159019] FAULT_INJECTION: forcing a failure.
[ 2818.159019] name failslab, interval 1, probability 0, space 0, times 0
[ 2818.160421] CPU: 1 PID: 12689 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2818.161079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2818.161620] Call Trace:
[ 2818.161801]  <TASK>
[ 2818.161961]  dump_stack_lvl+0x8f/0xb7
[ 2818.162235]  should_fail_ex.cold+0x5/0xa
[ 2818.162522]  should_failslab+0x9/0x20
[ 2818.162796]  __kmem_cache_alloc_node+0x5b/0x400
[ 2818.163113]  ? iter_file_splice_write+0x169/0xcb0
[ 2818.163445]  ? iter_file_splice_write+0x169/0xcb0
[ 2818.163790]  __kmalloc+0x46/0xc0
[ 2818.164040]  iter_file_splice_write+0x169/0xcb0
[ 2818.164359]  ? generic_file_read_iter+0x330/0x550
[ 2818.164702]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2818.165051]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2818.165401]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2818.165763]  ? __sanitizer_cov_trace_pc+0x20/0x70
[ 2818.166103]  ? security_file_permission+0xb5/0xe0
[ 2818.166438]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2818.166792]  direct_splice_actor+0x113/0x180
[ 2818.167098]  splice_direct_to_actor+0x33a/0x8c0
[ 2818.167427]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2818.167776]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2818.168130]  ? security_file_permission+0xb5/0xe0
[ 2818.168479]  do_splice_direct+0x1bc/0x290
[ 2818.168764]  ? __pfx_do_splice_direct+0x10/0x10
[ 2818.169094]  ? lock_is_held_type+0xdb/0x130
[ 2818.169423]  do_sendfile+0xb1d/0x1280
[ 2818.169719]  ? __pfx_do_sendfile+0x10/0x10
[ 2818.170034]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2818.170382]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2818.170778]  __x64_sys_sendfile64+0x248/0x2a0
[ 2818.171101]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2818.171458]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2818.171833]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2818.172209]  do_syscall_64+0x3f/0x90
[ 2818.172470]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2818.172848] RIP: 0033:0x7fa0e98b7b19
[ 2818.173100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2818.174337] RSP: 002b:00007fa0e6e2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2818.174840] RAX: ffffffffffffffda RBX: 00007fa0e99caf60 RCX: 00007fa0e98b7b19
[ 2818.175335] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2818.175843] RBP: 00007fa0e6e2d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2818.176340] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2818.176832] R13: 00007ffcecfd564f R14: 00007fa0e6e2d300 R15: 0000000000022000
[ 2818.177344]  </TASK>
[ 2818.321031] syz-executor.1: attempt to access beyond end of device
[ 2818.321031] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2818.322060] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2818.333809] syz-executor.6: attempt to access beyond end of device
[ 2818.333809] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2818.335299] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2818.346287] syz-executor.0: attempt to access beyond end of device
[ 2818.346287] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2818.347310] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:43:48 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x8a, 0x0)
r1 = openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000780)=0xe8)
syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3e8, 0x3, &(0x7f0000000600)=[{&(0x7f0000000400)="950ea2378dfda726c6f2fdce35f5e3486b3a5b", 0x13, 0x1}, {&(0x7f0000000440)="20d9426d2e3181c76b506673312a3cfe1e6aae0a5ab71c846176b3d58cc068534699b0120b731ff33488327ce774d2c644e1af5df8a2f35bf8f1cdc4c6ade0979b467ab52dacc7f8e2eac2b55c4db7c4db9ccfb7d450400c628aa82af4dd2223e70a3d8d344f651c6dc3990edce5d8c7124f6fd9abb9ea91b9711678002458ef58d512b615352dac5bcef1a55b632809ba0743b3a14d26a2103d05d5479dcc52abc297140813e57dfe3cbf75a87e9fe5d30333780c0909e1cd7a444efa4dff5d9b5d320eafb979e42d82ee103c9370a78ea87ce48d15589f4eb155fe67f1981f7bab40df9f4371f914fd8e3ddfaab2bb9ea8b4bf44", 0xf5, 0xfffffffffffffff9}, {&(0x7f0000000540)="0ea8d68faa3cfa6040282a853fcc75695eb4f071c826bc0dd9358e256452287cbb50621e2f0ace98b8ecd47cf73dc479dea2b85e6e1fc924fefc6a59d0109e55ad3cfc781e906c067dad635ad88670e438e0059f617fab2882926960a9537e524b66b94a21d88f3ae31bed9d8558e7d6ec0e15e090114907543254f5239956543203fa58d5657c8cd1ecaaa672f1e22fe542bd3f3e3c40d2d0042b443b312f01b86fa33871f8afa0e6357b283640987e", 0xb0, 0x2}], 0x0, &(0x7f00000007c0)={[{@huge_within_size}, {@mode={'mode', 0x3d, 0xffffffffffffff32}}, {@huge_advise}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '&,+-'}}, {@obj_role={'obj_role', 0x3d, '#*9'}}, {@uid_eq={'uid', 0x3d, r2}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@permit_directio}]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r6, r3, 0x0, 0xfffffdef)

[ 2818.376803] syz-executor.3: attempt to access beyond end of device
[ 2818.376803] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2818.378047] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:43:48 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 22)

20:43:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 19)

20:43:48 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 19)

[ 2818.481216] loop7: detected capacity change from 0 to 40
[ 2818.528352] loop4: detected capacity change from 0 to 40
20:43:48 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x50001, 0x0)
sendfile(r5, r6, &(0x7f0000000400)=0x8, 0x8001)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:43:48 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 19)

[ 2818.573849] loop1: detected capacity change from 0 to 40
[ 2818.610265] loop0: detected capacity change from 0 to 40
[ 2818.660723] loop3: detected capacity change from 0 to 40
[ 2818.753254] loop6: detected capacity change from 0 to 40
[ 2818.783868] syz-executor.4: attempt to access beyond end of device
[ 2818.783868] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2818.785943] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2818.899898] syz-executor.6: attempt to access beyond end of device
[ 2818.899898] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2818.901139] Buffer I/O error on dev loop6, logical block 31, lost async page write
20:43:49 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 23)

[ 2818.954341] syz-executor.1: attempt to access beyond end of device
[ 2818.954341] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2818.956754] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2818.991845] syz-executor.3: attempt to access beyond end of device
[ 2818.991845] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2818.993136] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2819.012018] loop4: detected capacity change from 0 to 40
[ 2819.083977] syz-executor.0: attempt to access beyond end of device
[ 2819.083977] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2819.085927] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2819.094857] FAULT_INJECTION: forcing a failure.
[ 2819.094857] name failslab, interval 1, probability 0, space 0, times 0
[ 2819.097097] CPU: 1 PID: 12724 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2819.098186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2819.099262] Call Trace:
[ 2819.099612]  <TASK>
[ 2819.099940]  dump_stack_lvl+0x8f/0xb7
[ 2819.100476]  should_fail_ex.cold+0x5/0xa
[ 2819.101054]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2819.101696]  should_failslab+0x9/0x20
[ 2819.102219]  kmem_cache_alloc+0x5a/0x410
[ 2819.102783]  fat_cache_add.part.0+0x5b4/0xb50
[ 2819.103425]  fat_get_cluster+0x922/0xd40
[ 2819.104015]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2819.104683]  fat_get_mapped_cluster+0x216/0x450
[ 2819.105327]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 2819.105983]  ? mark_lock.part.0+0xef/0x2f70
[ 2819.106599]  fat_bmap+0x1fc/0x460
[ 2819.107096]  fat_get_block+0x33e/0x930
[ 2819.107665]  ? __pfx_fat_get_block+0x10/0x10
[ 2819.108236]  ? lock_is_held_type+0xdb/0x130
[ 2819.108850]  __block_write_begin_int+0x380/0x13d0
[ 2819.109516]  ? __pfx_fat_get_block+0x10/0x10
[ 2819.110133]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2819.110842]  ? __pfx___lock_acquire+0x10/0x10
[ 2819.111459]  ? PageHeadHuge+0x169/0x1b0
[ 2819.112004]  ? __pfx_fat_get_block+0x10/0x10
[ 2819.112599]  block_write_begin+0xb9/0x450
[ 2819.113174]  cont_write_begin+0x4fe/0x700
[ 2819.113750]  ? current_time+0x79/0x2c0
[ 2819.114298]  ? __pfx_fat_get_block+0x10/0x10
[ 2819.114856]  ? mark_held_locks+0x9e/0xe0
[ 2819.115419]  ? __pfx_cont_write_begin+0x10/0x10
[ 2819.116038]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2819.116729]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2819.117377]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2819.118004]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2819.118647]  ? ktime_get_coarse_real_ts64+0x100/0x190
[ 2819.119353]  fat_write_begin+0x89/0x180
[ 2819.119872]  ? __pfx_fat_get_block+0x10/0x10
[ 2819.120485]  generic_perform_write+0x25a/0x580
[ 2819.121089]  ? __pfx_generic_perform_write+0x10/0x10
[ 2819.121768]  ? __pfx_fat_update_time+0x10/0x10
[ 2819.122349]  ? __pfx_file_update_time+0x10/0x10
[ 2819.122987]  ? generic_write_checks+0x2c0/0x400
[ 2819.123584]  __generic_file_write_iter+0x308/0x4b0
[ 2819.124263]  ? do_sendfile+0xb1d/0x1280
[ 2819.124813]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 2819.125465]  generic_file_write_iter+0xe7/0x350
[ 2819.126067]  do_iter_readv_writev+0x211/0x3c0
[ 2819.126693]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2819.127331]  ? avc_policy_seqno+0xd/0x70
[ 2819.127917]  ? security_file_permission+0xb5/0xe0
[ 2819.128546]  do_iter_write+0x18b/0x700
[ 2819.129092]  ? lock_is_held_type+0xdb/0x130
[ 2819.129658]  vfs_iter_write+0x74/0xb0
[ 2819.130190]  iter_file_splice_write+0x73e/0xcb0
[ 2819.130805]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2819.131495]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2819.132161]  ? inode_security+0x105/0x140
[ 2819.132746]  ? security_file_permission+0xb5/0xe0
[ 2819.133361]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2819.134071]  direct_splice_actor+0x113/0x180
[ 2819.134642]  splice_direct_to_actor+0x33a/0x8c0
[ 2819.135273]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2819.135919]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2819.136623]  ? security_file_permission+0xb5/0xe0
[ 2819.137245]  do_splice_direct+0x1bc/0x290
[ 2819.137803]  ? __pfx_do_splice_direct+0x10/0x10
[ 2819.138409]  ? lock_is_held_type+0xdb/0x130
[ 2819.138971]  do_sendfile+0xb1d/0x1280
[ 2819.139523]  ? __pfx_do_sendfile+0x10/0x10
[ 2819.140087]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2819.140786]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2819.141471]  ? xfd_validate_state+0x5d/0x180
[ 2819.142087]  __x64_sys_sendfile64+0x248/0x2a0
[ 2819.142656]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2819.143331]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2819.144018]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2819.144740]  do_syscall_64+0x3f/0x90
[ 2819.145214]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2819.145925] RIP: 0033:0x7fa0e98b7b19
[ 2819.146388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2819.148714] RSP: 002b:00007fa0e6e2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2819.149630] RAX: ffffffffffffffda RBX: 00007fa0e99caf60 RCX: 00007fa0e98b7b19
[ 2819.150489] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2819.151338] RBP: 00007fa0e6e2d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2819.152210] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2819.153059] R13: 00007ffcecfd564f R14: 00007fa0e6e2d300 R15: 0000000000022000
[ 2819.153949]  </TASK>
[ 2819.224898] syz-executor.4: attempt to access beyond end of device
[ 2819.224898] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2819.226458] Buffer I/O error on dev loop4, logical block 10, lost async page write
20:44:02 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 20)

20:44:02 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0)
fallocate(r4, 0x8, 0x0, 0x8000)
fchdir(r4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)

20:44:02 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 24)

20:44:02 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 20)

20:44:02 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:44:02 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 20)

20:44:02 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r1 = openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000000500)='./file0/file0\x00', 0x40, 0x1)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
lsetxattr$security_capability(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480), &(0x7f00000004c0)=@v3={0x3000000, [{0x0, 0x2}, {0x80, 0x4}], 0xffffffffffffffff}, 0x18, 0x3)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xb, 0x7}, 0x595a1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000400)={&(0x7f0000000180)=""/16, 0x10, 0x9, 0x800})
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r5, r2, 0x0, 0xfffffdef)

20:44:02 executing program 2:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2832.893542] loop3: detected capacity change from 0 to 40
[ 2832.910154] loop1: detected capacity change from 0 to 40
[ 2832.942945] loop0: detected capacity change from 0 to 40
[ 2832.986983] loop7: detected capacity change from 0 to 40
[ 2832.988136] loop5: detected capacity change from 0 to 40
[ 2832.990750] loop6: detected capacity change from 0 to 40
[ 2832.994223] loop4: detected capacity change from 0 to 40
[ 2833.043310] syz-executor.3: attempt to access beyond end of device
[ 2833.043310] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2833.045168] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2833.051219] syz-executor.1: attempt to access beyond end of device
[ 2833.051219] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2833.052389] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2833.075848] syz-executor.0: attempt to access beyond end of device
[ 2833.075848] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2833.076966] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:44:03 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21)

20:44:03 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 21)

[ 2833.191928] syz-executor.4: attempt to access beyond end of device
[ 2833.191928] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2833.192986] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2833.213282] loop1: detected capacity change from 0 to 40
[ 2833.228034] loop0: detected capacity change from 0 to 40
[ 2833.253877] FAULT_INJECTION: forcing a failure.
[ 2833.253877] name failslab, interval 1, probability 0, space 0, times 0
[ 2833.254967] CPU: 1 PID: 12752 Comm: syz-executor.1 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2833.255512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2833.256255] Call Trace:
[ 2833.256514]  <TASK>
[ 2833.256683]  dump_stack_lvl+0x8f/0xb7
[ 2833.256970]  should_fail_ex.cold+0x5/0xa
[ 2833.257270]  should_failslab+0x9/0x20
[ 2833.257545]  __kmem_cache_alloc_node+0x5b/0x400
[ 2833.257876]  ? iter_file_splice_write+0x169/0xcb0
[ 2833.258215]  ? iter_file_splice_write+0x169/0xcb0
[ 2833.258550]  __kmalloc+0x46/0xc0
[ 2833.258796]  iter_file_splice_write+0x169/0xcb0
[ 2833.259116]  ? generic_file_read_iter+0x330/0x550
[ 2833.259462]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2833.259808]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2833.260172]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2833.260539]  ? inode_security+0x105/0x140
[ 2833.260863]  ? security_file_permission+0xb5/0xe0
[ 2833.261207]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2833.261582]  direct_splice_actor+0x113/0x180
[ 2833.261896]  splice_direct_to_actor+0x33a/0x8c0
[ 2833.262235]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2833.262578]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2833.262954]  ? security_file_permission+0xb5/0xe0
[ 2833.263314]  do_splice_direct+0x1bc/0x290
[ 2833.263621]  ? __pfx_do_splice_direct+0x10/0x10
[ 2833.263971]  ? lock_is_held_type+0xdb/0x130
[ 2833.264296]  do_sendfile+0xb1d/0x1280
[ 2833.264600]  ? __pfx_do_sendfile+0x10/0x10
[ 2833.264937]  __x64_sys_sendfile64+0x248/0x2a0
[ 2833.265273]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2833.265643]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2833.266029]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2833.266411]  do_syscall_64+0x3f/0x90
[ 2833.266688]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2833.267082] RIP: 0033:0x7f617dc03b19
[ 2833.267419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2833.268689] RSP: 002b:00007f617b179188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2833.269236] RAX: ffffffffffffffda RBX: 00007f617dd16f60 RCX: 00007f617dc03b19
[ 2833.269746] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2833.270248] RBP: 00007f617b1791d0 R08: 0000000000000000 R09: 0000000000000000
[ 2833.270754] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2833.271253] R13: 00007ffc401d28bf R14: 00007f617b179300 R15: 0000000000022000
[ 2833.271774]  </TASK>
[ 2833.284246] FAULT_INJECTION: forcing a failure.
[ 2833.284246] name failslab, interval 1, probability 0, space 0, times 0
[ 2833.285270] CPU: 1 PID: 12753 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2833.285819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2833.286369] Call Trace:
[ 2833.286552]  <TASK>
[ 2833.286712]  dump_stack_lvl+0x8f/0xb7
[ 2833.286982]  should_fail_ex.cold+0x5/0xa
[ 2833.287286]  should_failslab+0x9/0x20
[ 2833.287568]  __kmem_cache_alloc_node+0x5b/0x400
[ 2833.287897]  ? iter_file_splice_write+0x169/0xcb0
[ 2833.288243]  ? iter_file_splice_write+0x169/0xcb0
[ 2833.288581]  __kmalloc+0x46/0xc0
[ 2833.288844]  iter_file_splice_write+0x169/0xcb0
[ 2833.289193]  ? generic_file_read_iter+0x330/0x550
[ 2833.289559]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2833.289934]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2833.290314]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2833.290712]  ? inode_security+0x105/0x140
[ 2833.291034]  ? security_file_permission+0xb5/0xe0
[ 2833.291407]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2833.291769]  direct_splice_actor+0x113/0x180
[ 2833.292098]  splice_direct_to_actor+0x33a/0x8c0
[ 2833.292448]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2833.292813]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2833.293195]  ? security_file_permission+0xb5/0xe0
[ 2833.293557]  do_splice_direct+0x1bc/0x290
[ 2833.293865]  ? __pfx_do_splice_direct+0x10/0x10
[ 2833.294207]  ? lock_is_held_type+0xdb/0x130
[ 2833.294535]  do_sendfile+0xb1d/0x1280
[ 2833.294831]  ? __pfx_do_sendfile+0x10/0x10
[ 2833.295148]  __x64_sys_sendfile64+0x248/0x2a0
[ 2833.295143] syz-executor.7: attempt to access beyond end of device
[ 2833.295143] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
20:44:03 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 21)

[ 2833.295475]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2833.295497]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2833.295524]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2833.295556]  do_syscall_64+0x3f/0x90
[ 2833.295574]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2833.295600] RIP: 0033:0x7f9d53ef4b19
[ 2833.295613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2833.295628] RSP: 002b:00007f9d5146a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2833.295645] RAX: ffffffffffffffda RBX: 00007f9d54007f60 RCX: 00007f9d53ef4b19
[ 2833.295656] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2833.295667] RBP: 00007f9d5146a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2833.295677] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2833.295687] R13: 00007ffffa87375f R14: 00007f9d5146a300 R15: 0000000000022000
[ 2833.295715]  </TASK>
[ 2833.314136] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2833.343146] syz-executor.6: attempt to access beyond end of device
[ 2833.343146] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2833.345272] Buffer I/O error on dev loop6, logical block 10, lost async page write
20:44:03 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 25)

20:44:03 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22)

[ 2833.419758] syz-executor.6: attempt to access beyond end of device
[ 2833.419758] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2833.420719] Buffer I/O error on dev loop6, logical block 10, lost async page write
20:44:03 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 22)

[ 2833.461198] loop4: detected capacity change from 0 to 40
[ 2833.485060] FAULT_INJECTION: forcing a failure.
[ 2833.485060] name failslab, interval 1, probability 0, space 0, times 0
[ 2833.485894] CPU: 1 PID: 12756 Comm: syz-executor.3 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2833.486437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2833.486982] Call Trace:
[ 2833.487170]  <TASK>
[ 2833.487334]  dump_stack_lvl+0x8f/0xb7
[ 2833.487610]  should_fail_ex.cold+0x5/0xa
[ 2833.487910]  should_failslab+0x9/0x20
[ 2833.488178]  __kmem_cache_alloc_node+0x5b/0x400
[ 2833.488502]  ? iter_file_splice_write+0x169/0xcb0
[ 2833.488844]  ? iter_file_splice_write+0x169/0xcb0
[ 2833.489178]  __kmalloc+0x46/0xc0
[ 2833.489427]  iter_file_splice_write+0x169/0xcb0
[ 2833.489761]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2833.490104]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2833.490456]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2833.490835]  ? security_file_permission+0xb5/0xe0
[ 2833.491168]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2833.491530]  direct_splice_actor+0x113/0x180
[ 2833.491844]  splice_direct_to_actor+0x33a/0x8c0
[ 2833.492175]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2833.492522]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2833.492877]  ? security_file_permission+0xb5/0xe0
[ 2833.493221]  do_splice_direct+0x1bc/0x290
[ 2833.493510]  ? __pfx_do_splice_direct+0x10/0x10
[ 2833.493841]  ? lock_is_held_type+0xdb/0x130
[ 2833.494148]  do_sendfile+0xb1d/0x1280
[ 2833.494453]  ? __pfx_do_sendfile+0x10/0x10
[ 2833.494780]  __x64_sys_sendfile64+0x248/0x2a0
[ 2833.495112]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2833.495474]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2833.495847]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2833.496233]  do_syscall_64+0x3f/0x90
[ 2833.496508]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2833.496891] RIP: 0033:0x7fec36e98b19
[ 2833.497161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2833.498432] RSP: 002b:00007fec3440e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2833.498977] RAX: ffffffffffffffda RBX: 00007fec36fabf60 RCX: 00007fec36e98b19
[ 2833.499486] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2833.499994] RBP: 00007fec3440e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2833.500498] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2833.500999] R13: 00007ffdd9d0783f R14: 00007fec3440e300 R15: 0000000000022000
[ 2833.501514]  </TASK>
[ 2833.556863] loop1: detected capacity change from 0 to 40
20:44:03 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcf7, 0xfff0000000000000}, 0x82, 0x0, 0x10000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:44:03 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=ANY=[@ANYBLOB="030302000000050081799cc72216d12735a0b0b6879e72e51d1615e5daf697179305f17deeb1e1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c9"], 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2833.580758] loop0: detected capacity change from 0 to 40
[ 2833.653073] FAULT_INJECTION: forcing a failure.
[ 2833.653073] name failslab, interval 1, probability 0, space 0, times 0
[ 2833.654175] CPU: 1 PID: 12765 Comm: syz-executor.1 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2833.654722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2833.655266] Call Trace:
[ 2833.655453]  <TASK>
[ 2833.655618]  dump_stack_lvl+0x8f/0xb7
[ 2833.655898]  should_fail_ex.cold+0x5/0xa
[ 2833.656194]  should_failslab+0x9/0x20
[ 2833.656469]  __kmem_cache_alloc_node+0x5b/0x400
[ 2833.656794]  ? iter_file_splice_write+0x169/0xcb0
[ 2833.657137]  ? iter_file_splice_write+0x169/0xcb0
[ 2833.657473]  __kmalloc+0x46/0xc0
[ 2833.657724]  iter_file_splice_write+0x169/0xcb0
[ 2833.658048]  ? generic_file_read_iter+0x330/0x550
[ 2833.658400]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2833.658750]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2833.659111]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2833.659485]  ? inode_security+0x105/0x140
[ 2833.659793]  ? security_file_permission+0xb5/0xe0
[ 2833.660146]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2833.660504]  direct_splice_actor+0x113/0x180
[ 2833.660817]  splice_direct_to_actor+0x33a/0x8c0
[ 2833.661149]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2833.661504]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2833.661859]  ? security_file_permission+0xb5/0xe0
[ 2833.662205]  do_splice_direct+0x1bc/0x290
[ 2833.662499]  ? __pfx_do_splice_direct+0x10/0x10
[ 2833.662853]  ? lock_is_held_type+0xdb/0x130
[ 2833.663165]  do_sendfile+0xb1d/0x1280
[ 2833.663449]  ? __pfx_do_sendfile+0x10/0x10
[ 2833.663759]  __x64_sys_sendfile64+0x248/0x2a0
[ 2833.664081]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2833.664433]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2833.664792]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2833.665150]  do_syscall_64+0x3f/0x90
[ 2833.665408]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2833.665773] RIP: 0033:0x7f617dc03b19
[ 2833.666034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2833.667204] RSP: 002b:00007f617b179188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2833.667716] RAX: ffffffffffffffda RBX: 00007f617dd16f60 RCX: 00007f617dc03b19
[ 2833.668198] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2833.668662] RBP: 00007f617b1791d0 R08: 0000000000000000 R09: 0000000000000000
[ 2833.669132] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2833.669607] R13: 00007ffc401d28bf R14: 00007f617b179300 R15: 0000000000022000
[ 2833.670100]  </TASK>
20:44:03 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 22)

[ 2833.680796] syz-executor.4: attempt to access beyond end of device
[ 2833.680796] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2833.681814] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2833.687216] FAULT_INJECTION: forcing a failure.
[ 2833.687216] name failslab, interval 1, probability 0, space 0, times 0
[ 2833.688202] CPU: 1 PID: 12766 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2833.688741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2833.689285] Call Trace:
[ 2833.689477]  <TASK>
[ 2833.689637]  dump_stack_lvl+0x8f/0xb7
[ 2833.689899]  should_fail_ex.cold+0x5/0xa
[ 2833.690185]  should_failslab+0x9/0x20
[ 2833.690454]  __kmem_cache_alloc_node+0x5b/0x400
[ 2833.690781]  ? iter_file_splice_write+0x169/0xcb0
[ 2833.691128]  ? iter_file_splice_write+0x169/0xcb0
[ 2833.691464]  __kmalloc+0x46/0xc0
[ 2833.691712]  iter_file_splice_write+0x169/0xcb0
[ 2833.692034]  ? generic_file_read_iter+0x330/0x550
[ 2833.692376]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2833.692721]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2833.693072]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2833.693440]  ? inode_security+0x105/0x140
[ 2833.693740]  ? security_file_permission+0xb5/0xe0
[ 2833.694076]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2833.694428]  direct_splice_actor+0x113/0x180
[ 2833.694734]  splice_direct_to_actor+0x33a/0x8c0
[ 2833.695056]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2833.695395]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2833.695749]  ? security_file_permission+0xb5/0xe0
[ 2833.696117]  do_splice_direct+0x1bc/0x290
[ 2833.696403]  ? __pfx_do_splice_direct+0x10/0x10
[ 2833.696732]  ? lock_is_held_type+0xdb/0x130
[ 2833.697036]  do_sendfile+0xb1d/0x1280
[ 2833.697320]  ? __pfx_do_sendfile+0x10/0x10
[ 2833.697627]  __x64_sys_sendfile64+0x248/0x2a0
[ 2833.697938]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2833.698277]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2833.698655]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2833.699033]  do_syscall_64+0x3f/0x90
[ 2833.699301]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2833.699680] RIP: 0033:0x7f9d53ef4b19
[ 2833.699953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2833.701196] RSP: 002b:00007f9d5146a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2833.701732] RAX: ffffffffffffffda RBX: 00007f9d54007f60 RCX: 00007f9d53ef4b19
[ 2833.702235] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2833.702732] RBP: 00007f9d5146a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2833.703240] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2833.703734] R13: 00007ffffa87375f R14: 00007f9d5146a300 R15: 0000000000022000
[ 2833.704249]  </TASK>
[ 2833.705690] loop6: detected capacity change from 0 to 40
[ 2833.720371] loop7: detected capacity change from 0 to 40
[ 2833.736935] loop3: detected capacity change from 0 to 40
20:44:03 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 26)

20:44:03 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23)

[ 2833.843334] FAULT_INJECTION: forcing a failure.
[ 2833.843334] name failslab, interval 1, probability 0, space 0, times 0
[ 2833.844747] CPU: 1 PID: 12772 Comm: syz-executor.3 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2833.845291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2833.845837] Call Trace:
[ 2833.846018]  <TASK>
[ 2833.846181]  dump_stack_lvl+0x8f/0xb7
[ 2833.846453]  should_fail_ex.cold+0x5/0xa
[ 2833.846750]  should_failslab+0x9/0x20
[ 2833.847025]  __kmem_cache_alloc_node+0x5b/0x400
[ 2833.847355]  ? iter_file_splice_write+0x169/0xcb0
[ 2833.847699]  ? iter_file_splice_write+0x169/0xcb0
[ 2833.848046]  __kmalloc+0x46/0xc0
[ 2833.848298]  iter_file_splice_write+0x169/0xcb0
[ 2833.848620]  ? generic_file_read_iter+0x330/0x550
[ 2833.848971]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2833.849312]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2833.849667]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2833.850042]  ? inode_security+0x105/0x140
[ 2833.850355]  ? security_file_permission+0xb5/0xe0
[ 2833.850694]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2833.851049]  direct_splice_actor+0x113/0x180
[ 2833.851361]  splice_direct_to_actor+0x33a/0x8c0
[ 2833.851687]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2833.852037]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2833.852395]  ? security_file_permission+0xb5/0xe0
[ 2833.852738]  do_splice_direct+0x1bc/0x290
[ 2833.853028]  ? __pfx_do_splice_direct+0x10/0x10
[ 2833.853359]  ? lock_is_held_type+0xdb/0x130
[ 2833.853671]  do_sendfile+0xb1d/0x1280
[ 2833.853959]  ? __pfx_do_sendfile+0x10/0x10
[ 2833.854275]  __x64_sys_sendfile64+0x248/0x2a0
[ 2833.854592]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2833.854934]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2833.855292]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2833.855663]  do_syscall_64+0x3f/0x90
[ 2833.855936]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2833.856302] RIP: 0033:0x7fec36e98b19
[ 2833.856565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2833.857747] RSP: 002b:00007fec3440e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2833.858253] RAX: ffffffffffffffda RBX: 00007fec36fabf60 RCX: 00007fec36e98b19
[ 2833.858731] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2833.859202] RBP: 00007fec3440e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2833.859674] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2833.860153] R13: 00007ffdd9d0783f R14: 00007fec3440e300 R15: 0000000000022000
[ 2833.860644]  </TASK>
[ 2833.896369] syz-executor.6: attempt to access beyond end of device
[ 2833.896369] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2833.897421] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2833.912813] syz-executor.7: attempt to access beyond end of device
[ 2833.912813] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2833.913968] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2833.929841] loop4: detected capacity change from 0 to 40
[ 2833.933188] loop1: detected capacity change from 0 to 40
20:44:04 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2834.015530] loop5: detected capacity change from 0 to 40
[ 2834.021938] FAULT_INJECTION: forcing a failure.
[ 2834.021938] name failslab, interval 1, probability 0, space 0, times 0
[ 2834.023987] CPU: 0 PID: 12779 Comm: syz-executor.1 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2834.025007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2834.026026] Call Trace:
[ 2834.026365]  <TASK>
[ 2834.026669]  dump_stack_lvl+0x8f/0xb7
[ 2834.027183]  should_fail_ex.cold+0x5/0xa
[ 2834.027729]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2834.028349]  should_failslab+0x9/0x20
[ 2834.028855]  kmem_cache_alloc+0x5a/0x410
[ 2834.029397]  fat_cache_add.part.0+0x5b4/0xb50
[ 2834.030003]  fat_get_cluster+0x922/0xd40
[ 2834.030559]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2834.031196]  fat_get_mapped_cluster+0x216/0x450
[ 2834.031811]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 2834.032531]  fat_bmap+0x1fc/0x460
[ 2834.033012]  fat_get_block+0x33e/0x930
[ 2834.033546]  ? __pfx_fat_get_block+0x10/0x10
[ 2834.034121]  ? lock_is_held_type+0xdb/0x130
[ 2834.034717]  __block_write_begin_int+0x380/0x13d0
[ 2834.035349]  ? __pfx_fat_get_block+0x10/0x10
[ 2834.035944]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2834.036617]  ? __pfx___lock_acquire+0x10/0x10
[ 2834.037214]  ? PageHeadHuge+0x169/0x1b0
[ 2834.037743]  ? __pfx_fat_get_block+0x10/0x10
[ 2834.038308]  block_write_begin+0xb9/0x450
[ 2834.038858]  cont_write_begin+0x4fe/0x700
[ 2834.039399]  ? current_time+0x79/0x2c0
[ 2834.039936]  ? __pfx_fat_get_block+0x10/0x10
[ 2834.040501]  ? mark_held_locks+0x9e/0xe0
[ 2834.041029]  ? __pfx_cont_write_begin+0x10/0x10
[ 2834.041627]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2834.042283]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2834.042945]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2834.043531]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2834.044202]  ? ktime_get_coarse_real_ts64+0x100/0x190
[ 2834.044862]  fat_write_begin+0x89/0x180
[ 2834.045377]  ? __pfx_fat_get_block+0x10/0x10
[ 2834.045954]  generic_perform_write+0x25a/0x580
[ 2834.046565]  ? __pfx_generic_perform_write+0x10/0x10
[ 2834.047209]  ? __pfx_fat_update_time+0x10/0x10
[ 2834.047808]  ? __pfx_file_update_time+0x10/0x10
[ 2834.048426]  ? generic_write_checks+0x2c0/0x400
[ 2834.049034]  __generic_file_write_iter+0x308/0x4b0
[ 2834.049678]  generic_file_write_iter+0xe7/0x350
[ 2834.050292]  do_iter_readv_writev+0x211/0x3c0
[ 2834.050883]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2834.051524]  ? avc_policy_seqno+0xd/0x70
[ 2834.052074]  ? security_file_permission+0xb5/0xe0
[ 2834.052709]  do_iter_write+0x18b/0x700
[ 2834.053230]  ? lock_is_held_type+0xdb/0x130
[ 2834.053806]  vfs_iter_write+0x74/0xb0
[ 2834.054314]  iter_file_splice_write+0x73e/0xcb0
[ 2834.054934]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2834.055589]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2834.056273]  ? inode_security+0x105/0x140
[ 2834.056829]  ? security_file_permission+0xb5/0xe0
[ 2834.057454]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2834.058113]  direct_splice_actor+0x113/0x180
[ 2834.058694]  splice_direct_to_actor+0x33a/0x8c0
[ 2834.059313]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2834.060048]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2834.060780]  ? security_file_permission+0xb5/0xe0
[ 2834.061494]  do_splice_direct+0x1bc/0x290
[ 2834.062089]  ? __pfx_do_splice_direct+0x10/0x10
[ 2834.062786]  ? lock_is_held_type+0xdb/0x130
[ 2834.063427]  do_sendfile+0xb1d/0x1280
[ 2834.064023]  ? __pfx_do_sendfile+0x10/0x10
[ 2834.064670]  __x64_sys_sendfile64+0x248/0x2a0
[ 2834.065339]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2834.066059]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2834.066799]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2834.067573]  do_syscall_64+0x3f/0x90
[ 2834.068122]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2834.068874] RIP: 0033:0x7f617dc03b19
[ 2834.069405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2834.071853] RSP: 002b:00007f617b179188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2834.072891] RAX: ffffffffffffffda RBX: 00007f617dd16f60 RCX: 00007f617dc03b19
[ 2834.073869] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2834.074831] RBP: 00007f617b1791d0 R08: 0000000000000000 R09: 0000000000000000
[ 2834.075799] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2834.076784] R13: 00007ffc401d28bf R14: 00007f617b179300 R15: 0000000000022000
[ 2834.077792]  </TASK>
20:44:20 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 23)

20:44:20 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 23)

20:44:20 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:44:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24)

20:44:20 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="c71bb991a137ecc5f52e072372656c74", 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000400)=0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:44:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pipe2(&(0x7f00000003c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x8c000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0x22, 0x6, 0xf9, "69568dc20f367278817d36a8788ef49f", "43f5c6e00fa918286b8cc65c34"}, 0x22, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

20:44:20 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 27)

20:44:20 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2850.249365] loop0: detected capacity change from 0 to 40
[ 2850.297354] loop1: detected capacity change from 0 to 40
[ 2850.300967] loop7: detected capacity change from 0 to 40
[ 2850.302289] loop3: detected capacity change from 0 to 40
[ 2850.305275] loop5: detected capacity change from 0 to 40
[ 2850.308721] loop4: detected capacity change from 0 to 40
[ 2850.312071] loop6: detected capacity change from 0 to 40
[ 2850.362914] FAULT_INJECTION: forcing a failure.
[ 2850.362914] name failslab, interval 1, probability 0, space 0, times 0
[ 2850.364739] CPU: 0 PID: 12793 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221206 #1
[ 2850.365736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2850.366722] Call Trace:
[ 2850.367052]  <TASK>
[ 2850.367350]  dump_stack_lvl+0x8f/0xb7
[ 2850.367850]  should_fail_ex.cold+0x5/0xa
[ 2850.368501]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2850.369121]  should_failslab+0x9/0x20
[ 2850.369629]  kmem_cache_alloc+0x5a/0x410
[ 2850.370167]  fat_cache_add.part.0+0x5b4/0xb50
[ 2850.370761]  fat_get_cluster+0x922/0xd40
[ 2850.371319]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2850.371944]  fat_get_mapped_cluster+0x216/0x450
[ 2850.372578]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 2850.373258]  fat_bmap+0x1fc/0x460
[ 2850.373754]  fat_get_block+0x33e/0x930
[ 2850.374285]  ? __pfx_fat_get_block+0x10/0x10
[ 2850.374869]  ? lock_is_held_type+0xdb/0x130
[ 2850.375486]  __block_write_begin_int+0x380/0x13d0
[ 2850.376148]  ? __pfx_fat_get_block+0x10/0x10
[ 2850.376761]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2850.377447]  ? __pfx___lock_acquire+0x10/0x10
[ 2850.378059]  ? PageHeadHuge+0x169/0x1b0
[ 2850.378610]  ? __pfx_fat_get_block+0x10/0x10
[ 2850.379197]  block_write_begin+0xb9/0x450
[ 2850.379761]  cont_write_begin+0x4fe/0x700
[ 2850.380319]  ? current_time+0x79/0x2c0
[ 2850.380864]  ? __pfx_fat_get_block+0x10/0x10
[ 2850.381449]  ? mark_held_locks+0x9e/0xe0
[ 2850.381993]  ? __pfx_cont_write_begin+0x10/0x10
[ 2850.382606]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2850.383276]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2850.383953]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2850.384570]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2850.385239]  ? ktime_get_coarse_real_ts64+0x100/0x190
[ 2850.385916]  fat_write_begin+0x89/0x180
[ 2850.386441]  ? __pfx_fat_get_block+0x10/0x10
[ 2850.387037]  generic_perform_write+0x25a/0x580
[ 2850.387660]  ? __pfx_generic_perform_write+0x10/0x10
[ 2850.388333]  ? __pfx_fat_update_time+0x10/0x10
[ 2850.388939]  ? __pfx_file_update_time+0x10/0x10
[ 2850.389567]  ? generic_write_checks+0x2c0/0x400
[ 2850.390195]  __generic_file_write_iter+0x308/0x4b0
[ 2850.390849]  ? do_sendfile+0xb1d/0x1280
[ 2850.391389]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 2850.392010]  generic_file_write_iter+0xe7/0x350
[ 2850.392666]  do_iter_readv_writev+0x211/0x3c0
[ 2850.393278]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2850.393933]  ? avc_policy_seqno+0xd/0x70
[ 2850.394472]  ? security_file_permission+0xb5/0xe0
[ 2850.395127]  do_iter_write+0x18b/0x700
[ 2850.395665]  ? lock_is_held_type+0xdb/0x130
[ 2850.396269]  vfs_iter_write+0x74/0xb0
[ 2850.396794]  iter_file_splice_write+0x73e/0xcb0
[ 2850.397438]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2850.398111]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2850.398808]  ? inode_security+0x105/0x140
[ 2850.399390]  ? security_file_permission+0xb5/0xe0
[ 2850.400034]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2850.400722]  direct_splice_actor+0x113/0x180
[ 2850.401312]  splice_direct_to_actor+0x33a/0x8c0
[ 2850.401941]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2850.402598]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2850.403275]  ? security_file_permission+0xb5/0xe0
[ 2850.403927]  do_splice_direct+0x1bc/0x290
[ 2850.404498]  ? __pfx_do_splice_direct+0x10/0x10
[ 2850.405135]  ? lock_is_held_type+0xdb/0x130
[ 2850.405726]  do_sendfile+0xb1d/0x1280
[ 2850.406272]  ? __pfx_do_sendfile+0x10/0x10
[ 2850.406867]  __x64_sys_sendfile64+0x248/0x2a0
[ 2850.407448]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2850.408108]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2850.408801]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2850.409501]  do_syscall_64+0x3f/0x90
[ 2850.410002]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2850.410693] RIP: 0033:0x7f9d53ef4b19
[ 2850.411182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2850.413452] RSP: 002b:00007f9d5146a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2850.414411] RAX: ffffffffffffffda RBX: 00007f9d54007f60 RCX: 00007f9d53ef4b19
[ 2850.415311] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2850.416239] RBP: 00007f9d5146a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2850.417143] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2850.418040] R13: 00007ffffa87375f R14: 00007f9d5146a300 R15: 0000000000022000
[ 2850.418972]  </TASK>
[ 2850.481144] bio_check_eod: 3 callbacks suppressed
[ 2850.481167] syz-executor.7: attempt to access beyond end of device
[ 2850.481167] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2850.483523] buffer_io_error: 3 callbacks suppressed
[ 2850.483540] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2850.564842] syz-executor.7: attempt to access beyond end of device
[ 2850.564842] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2850.566778] Buffer I/O error on dev loop7, logical block 10, lost async page write
20:44:20 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:44:20 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 2850.628081] syz-executor.3: attempt to access beyond end of device
[ 2850.628081] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2850.630040] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2850.636382] syz-executor.1: attempt to access beyond end of device
[ 2850.636382] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2850.638250] Buffer I/O error on dev loop1, logical block 10, lost async page write
20:44:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v1={0x2, "98235a"}, 0x4, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x14c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x128, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x794}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x40}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffc0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5d1d}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x401}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008010}, 0x810)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
open$dir(&(0x7f00000005c0)='./file1\x00', 0x101001, 0x18)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3, 0x0, 0x2, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x92480, 0x0)
dup(r4)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2850.709185] loop6: detected capacity change from 0 to 40
20:44:20 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000180)=0x8000, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r5, r1, 0x0, 0xfffffdef)

[ 2850.771276] loop5: detected capacity change from 0 to 40
[ 2850.821162] loop4: detected capacity change from 0 to 40
20:44:20 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 24)

20:44:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25)

20:44:21 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r1 = openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2becb57545e944f1, 0x1c2)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x1, 0x98, 0x8, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000180)}, 0x40000, 0x200, 0xf05, 0x8, 0x800, 0x1, 0x1000, 0x0, 0x2d5, 0x0, 0x8000}, 0xffffffffffffffff, 0xa, r1, 0x0)
sendfile(r5, r2, 0x0, 0xfffffdef)

[ 2850.932355] syz-executor.0: attempt to access beyond end of device
[ 2850.932355] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2850.934306] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2851.013145] loop7: detected capacity change from 0 to 40
[ 2851.062904] loop1: detected capacity change from 0 to 40
[ 2851.082609] loop6: detected capacity change from 0 to 40
20:44:21 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 24)

[ 2851.135017] loop3: detected capacity change from 0 to 40
20:44:21 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2851.237991] syz-executor.7: attempt to access beyond end of device
[ 2851.237991] loop7: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2851.239665] Buffer I/O error on dev loop7, logical block 31, lost async page write
20:44:21 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2851.270242] syz-executor.4: attempt to access beyond end of device
[ 2851.270242] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.271790] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2851.297687] loop0: detected capacity change from 0 to 40
[ 2851.425034] loop6: detected capacity change from 0 to 40
[ 2851.430882] syz-executor.3: attempt to access beyond end of device
[ 2851.430882] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.432190] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2851.453863] syz-executor.1: attempt to access beyond end of device
[ 2851.453863] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.455122] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2851.527906] syz-executor.0: attempt to access beyond end of device
[ 2851.527906] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.529040] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:44:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1000, 0x7}, 0x15182, 0x3, 0x4, 0x4, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x94, 0x2, 0xfc, 0x0, 0xffffffffffffffff, 0x208, 0xd, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x7}, 0x181, 0x100, 0x6, 0x3, 0x8000, 0xe7, 0x3, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x3, r2, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x4ea0}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = getuid()
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x1, r3}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xff, 0x2, &(0x7f0000000580)=[{&(0x7f0000000400)="a090f31c59fe4bf438972ada9529a798b9f67cc3ef3cb1f3eb62a1bc54440b187022f04c55a1ddd461a4ca298887a3b944003be140f3ea431c3595c85acf455d9574b77ce61d95199fdbf056ef459ed5409669b1e5d8f3bd51426dc251798ef123d20e45cf48b312b8fa6d5db8974aed0daf9f64aaf1790062beda10da72f5ce38f36cf2c30b9601cee047a1909a", 0x8e, 0x5}, {&(0x7f00000004c0)="8284c3f0ffd45032144382df7fa126a772c7e3c37d0fbfa52e3bc4e9e5dbd865ff464490d0241e27e63be8a4e046e964468d2f30854350c7b94f5f45f1bdf5e15e4aa1332931a73d5d5adf4859fd6ba6be5b6dede00a11ecadcb0a2af771156e443dc5caa69cbd94b4af5823a476cd6ab0bb29c2ae94c135ef8d0a69d840227467af268a484e6e870053939795004cc6f7e8a52e", 0x94, 0x8}], 0x1000040, &(0x7f00000006c0)={[{'-\xb8,'}, {'vfat\x00'}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@uid_lt={'uid<', r3}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, '['}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendfile(r1, r0, 0x0, 0xfffffdef)

20:44:36 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x301042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x8200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0)
fallocate(r4, 0x8, 0x0, 0x8000)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000000000002e2f66696c65300014a6da6d043b4930d4d1e6ac7d576596c680884555cc7c52cd5b07f08d8d7f4a23c5bca8e7f964b8e07965b65e72f5354f1532f0ba7b8ef951c938cb7adf0c7534a7a8481e17413b35987416ac227a4b52db2989bc880c8cb46ce6f4c3c688ed86bd437d53aaa9dcb3c84fa7b99eccc7e75e9bb0ddcbc647c5fb765da776a674b1e4e3681a8f88aa3661890b1fc279e56a984fe748767a45f91a926c00c0e0dcb9f75dab58a9b5e17404230391887aaa35"])

20:44:36 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r1 = openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4000)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, r7, 0xffffffffffffffff, r6, r8], 0x5)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x40}, 0x428, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r2, 0x0, 0xfffffdef)

20:44:36 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26)

20:44:36 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0)
fallocate(r4, 0x8, 0x0, 0x8000)
write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="07010881050200003901000001000000da010000b400000000000000000000009f89e3005d5a459a7dff8822996569800bdc8945e2ab19323634d3a5264a7f03f3ef54476dc904cb5d6a62f5d5eb8c4a75b45460adb517a212d9534c9d1bdb2c15a56cd990293232e97c061700000000000000000000000000000000000000000000000000000010000000000000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100"/364], 0x16c)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r5, r1, 0x0, 0xfffffdef)

20:44:36 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 25)

20:44:36 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 25)

20:44:36 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(0x0, &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2865.942255] loop4: detected capacity change from 0 to 40
[ 2865.963024] loop3: detected capacity change from 0 to 40
[ 2865.981926] loop1: detected capacity change from 0 to 40
[ 2865.992592] loop0: detected capacity change from 0 to 40
[ 2865.993751] loop7: detected capacity change from 0 to 40
[ 2866.027273] loop5: detected capacity change from 0 to 40
[ 2866.029084] loop6: detected capacity change from 0 to 40
20:44:36 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x2d}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 2866.134815] bio_check_eod: 1 callbacks suppressed
[ 2866.134832] syz-executor.3: attempt to access beyond end of device
[ 2866.134832] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2866.136344] buffer_io_error: 1 callbacks suppressed
[ 2866.136355] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2866.137861] syz-executor.5: attempt to access beyond end of device
[ 2866.137861] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2866.140414] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2866.150765] syz-executor.1: attempt to access beyond end of device
[ 2866.150765] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2866.151843] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2866.186531] syz-executor.0: attempt to access beyond end of device
[ 2866.186531] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2866.187680] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2866.216107] loop4: detected capacity change from 0 to 40
20:44:36 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27)

20:44:36 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 26)

[ 2866.236325] syz-executor.6: attempt to access beyond end of device
[ 2866.236325] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2866.237711] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2866.280574] syz-executor.6: attempt to access beyond end of device
[ 2866.280574] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2866.281633] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2866.300624] syz-executor.7: attempt to access beyond end of device
[ 2866.300624] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2866.302006] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2866.336170] loop3: detected capacity change from 0 to 40
[ 2866.338853] loop1: detected capacity change from 0 to 40
[ 2866.439187] syz-executor.4: attempt to access beyond end of device
[ 2866.439187] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2866.440313] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2866.482100] syz-executor.1: attempt to access beyond end of device
[ 2866.482100] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2866.483174] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2866.494973] syz-executor.4: attempt to access beyond end of device
[ 2866.494973] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2866.495831] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2881.935813] loop4: detected capacity change from 0 to 4096
20:44:52 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x2, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:44:52 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(0x0, &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:44:52 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x101)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

20:44:52 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28)

20:44:52 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
openat(r0, &(0x7f0000000400)='./file1\x00', 0x404400, 0x2)
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x15182, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:44:52 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6e646f8866d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x4000000000000007}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef)

20:44:52 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 26)

20:44:52 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 27)

[ 2881.940020] loop0: detected capacity change from 0 to 40
[ 2881.979186] loop3: detected capacity change from 0 to 40
[ 2882.020941] loop6: detected capacity change from 0 to 40
[ 2882.025281] loop1: detected capacity change from 0 to 40
[ 2882.027291] loop7: detected capacity change from 0 to 40
[ 2882.028907] loop5: detected capacity change from 0 to 40
[ 2882.089828] bio_check_eod: 1 callbacks suppressed
[ 2882.089840] syz-executor.0: attempt to access beyond end of device
[ 2882.089840] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2882.091228] buffer_io_error: 1 callbacks suppressed
[ 2882.091255] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2882.126725] syz-executor.5: attempt to access beyond end of device
[ 2882.126725] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2882.127644] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2882.155302] syz-executor.3: attempt to access beyond end of device
[ 2882.155302] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2882.157866] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2882.203281] syz-executor.7: attempt to access beyond end of device
[ 2882.203281] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2882.204415] Buffer I/O error on dev loop7, logical block 10, lost async page write
20:44:52 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 27)

20:44:52 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(0x0, &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:44:52 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 28)

[ 2882.264844] syz-executor.1: attempt to access beyond end of device
[ 2882.264844] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2882.266279] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2882.288699] syz-executor.6: attempt to access beyond end of device
[ 2882.288699] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2882.289905] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2882.324825] loop0: detected capacity change from 0 to 40
20:44:52 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2882.369306] loop3: detected capacity change from 0 to 40
[ 2882.372739] loop5: detected capacity change from 0 to 40
20:44:52 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29)

[ 2882.462341] syz-executor.5: attempt to access beyond end of device
[ 2882.462341] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2882.463402] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2882.467686] syz-executor.0: attempt to access beyond end of device
[ 2882.467686] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2882.468506] loop7: detected capacity change from 0 to 40
[ 2882.469104] Buffer I/O error on dev loop0, logical block 10, lost async page write
20:44:52 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2882.553779] loop1: detected capacity change from 0 to 40
[ 2882.559699] syz-executor.3: attempt to access beyond end of device
[ 2882.559699] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2882.560865] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:44:52 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 28)

20:44:52 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2882.592302] loop6: detected capacity change from 0 to 40
[ 2882.645640] syz-executor.7: attempt to access beyond end of device
[ 2882.645640] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2882.646818] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2882.684191] loop0: detected capacity change from 0 to 40
[ 2882.684421] loop5: detected capacity change from 0 to 40
20:44:52 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 29)

[ 2882.768908] loop3: detected capacity change from 0 to 40
20:44:52 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4c000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x78b002, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xb, 0x5}, 0x15182, 0x3, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40a00, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file1\x00'})
perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x5, 0x1f, 0x9, 0x0, 0x0, 0x7fffffff, 0x44109, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000180), 0xc}, 0x11040, 0x6, 0x200, 0x1, 0x0, 0xfffffffa, 0x1b00, 0x0, 0x7, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, r5, 0x1)

[ 2882.894334] loop7: detected capacity change from 0 to 40
20:45:09 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:45:09 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 29)

[ 2899.509905] loop7: detected capacity change from 0 to 40
[ 2899.512516] loop4: detected capacity change from 0 to 40
[ 2899.517187] loop5: detected capacity change from 0 to 40
[ 2899.521888] loop1: detected capacity change from 0 to 40
20:45:09 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xff, 0x5, 0x80, 0x3, 0x0, 0x7, 0x7230, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9, 0x7ff}, 0x10800, 0x40, 0xfffffffe, 0x4, 0x16e, 0xffff4562, 0x7, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x10, r2, 0x2)

20:45:09 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x28000, 0x10b)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)
setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000180)=0xe8, 0x4)

20:45:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30)

20:45:09 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000440)=ANY=[@ANYBLOB="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"/300], 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
preadv(r5, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
accept4(r5, 0x0, &(0x7f0000000000), 0x80800)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x46401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:45:09 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 30)

[ 2899.525586] loop6: detected capacity change from 0 to 40
20:45:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f00000003c0)=ANY=[@ANYBLOB="000002000000000079799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f264c9ef59b97d9ebf87c86651c12a72d7759e1182fa400c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f000000000000"], 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2899.532263] loop0: detected capacity change from 0 to 40
[ 2899.568239] bio_check_eod: 6 callbacks suppressed
[ 2899.568254] syz-executor.5: attempt to access beyond end of device
[ 2899.568254] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.569576] buffer_io_error: 6 callbacks suppressed
[ 2899.569585] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2899.586914] loop3: detected capacity change from 0 to 40
[ 2899.620068] syz-executor.4: attempt to access beyond end of device
[ 2899.620068] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.621251] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2899.635080] syz-executor.6: attempt to access beyond end of device
[ 2899.635080] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.636124] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2899.659133] syz-executor.4: attempt to access beyond end of device
[ 2899.659133] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.660016] Buffer I/O error on dev loop4, logical block 10, lost async page write
20:45:09 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)=@v2={0x3, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2899.681819] syz-executor.6: attempt to access beyond end of device
[ 2899.681819] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.682749] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2899.700117] syz-executor.0: attempt to access beyond end of device
[ 2899.700117] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.701207] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2899.731177] loop5: detected capacity change from 0 to 40
[ 2899.744194] syz-executor.7: attempt to access beyond end of device
[ 2899.744194] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.746026] Buffer I/O error on dev loop7, logical block 10, lost async page write
20:45:09 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000040)='./file1\x00', 0x40e000, 0x1)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef)

20:45:09 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x7}, 0x15182, 0x3, 0x9, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000002600)=[{&(0x7f0000000400)=""/135, 0x87}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000002580)=""/122, 0x7a}], 0x7)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2899.775414] syz-executor.1: attempt to access beyond end of device
[ 2899.775414] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.776778] Buffer I/O error on dev loop1, logical block 10, lost async page write
20:45:09 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 30)

[ 2899.850651] loop6: detected capacity change from 0 to 40
[ 2899.851426] syz-executor.5: attempt to access beyond end of device
[ 2899.851426] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.852501] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2899.859052] syz-executor.3: attempt to access beyond end of device
[ 2899.859052] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.860120] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:45:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31)

[ 2899.883285] loop4: detected capacity change from 0 to 40
20:45:09 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r0, 0x0, 0xfffffdef)

20:45:10 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2899.954082] loop0: detected capacity change from 0 to 40
20:45:10 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 31)

[ 2900.033706] loop1: detected capacity change from 0 to 40
[ 2900.056158] loop7: detected capacity change from 0 to 40
[ 2900.066821] loop5: detected capacity change from 0 to 40
[ 2900.144662] loop3: detected capacity change from 0 to 40
20:45:10 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r1, &(0x7f0000000300)='./file1\x00', 0x400080, 0x124)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
creat(&(0x7f0000000180)='./file0\x00', 0xc5)
sendfile(r3, r1, 0x0, 0xfffffdef)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x8001, 0x101, 0x1})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x100, 0x104)

20:45:10 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 31)

20:45:10 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2900.326995] loop4: detected capacity change from 0 to 40
20:45:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32)

[ 2900.349932] loop0: detected capacity change from 0 to 40
[ 2900.383498] loop5: detected capacity change from 0 to 40
[ 2900.472848] loop1: detected capacity change from 0 to 40
20:45:10 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(r0, &(0x7f0000000040)='./file1\x00', 0x10502, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

20:45:10 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f0000000400), &(0x7f0000000440)=@v1={0x2, "9d92b282ba56339601191c5ed8dc6a"}, 0x10, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:45:10 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 32)

20:45:10 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:45:10 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
r1 = openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffffff, 0x0, 0x501140, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=<r4=>0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0)
fallocate(r5, 0x8, 0x0, 0x8000)
recvfrom(r5, &(0x7f0000000380)=""/12, 0xc, 0x0, &(0x7f0000000400)=@l2={0x1f, 0x0, @any, 0x8001, 0x1}, 0x80)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x5, 0x2, 0x9, 0xbb, 0x0, 0x8, 0x81000, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040), 0x3}, 0x5000, 0x5, 0x8000, 0x4, 0x5, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1}, r4, 0xc, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x40b10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r3, r2, 0x0, 0xfffffdef)

20:45:10 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 32)

[ 2900.714953] loop3: detected capacity change from 0 to 40
[ 2900.717901] loop4: detected capacity change from 0 to 40
[ 2900.725881] loop7: detected capacity change from 0 to 40
[ 2900.732733] loop5: detected capacity change from 0 to 40
[ 2900.779094] loop0: detected capacity change from 0 to 40
20:45:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, 0x0, 0x0, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x80000000}}, './file2\x00'})
open_tree(r2, &(0x7f0000000180)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

20:45:24 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:45:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33)

20:45:24 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 33)

20:45:24 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 33)

20:45:24 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:45:24 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:45:24 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0))
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040), &(0x7f0000000180), 0x2, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1050c2, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r4, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}}, 0x0)
syz_io_uring_complete(0x0)
close(0xffffffffffffffff)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2913.989430] loop7: detected capacity change from 0 to 40
[ 2913.990200] loop6: detected capacity change from 0 to 40
[ 2913.991149] loop3: detected capacity change from 0 to 40
[ 2914.000980] loop1: detected capacity change from 0 to 40
[ 2914.001109] loop4: detected capacity change from 0 to 40
[ 2914.002957] loop0: detected capacity change from 0 to 40
[ 2914.072008] loop5: detected capacity change from 0 to 40
[ 2914.152411] bio_check_eod: 16 callbacks suppressed
[ 2914.152425] syz-executor.7: attempt to access beyond end of device
[ 2914.152425] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2914.153652] buffer_io_error: 16 callbacks suppressed
[ 2914.153662] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2914.165688] syz-executor.6: attempt to access beyond end of device
[ 2914.165688] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2914.166680] Buffer I/O error on dev loop6, logical block 10, lost async page write
20:45:24 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
creat(&(0x7f0000000040)='./file0\x00', 0x108)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 2914.188112] syz-executor.1: attempt to access beyond end of device
[ 2914.188112] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2914.189388] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2914.208085] syz-executor.5: attempt to access beyond end of device
[ 2914.208085] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2914.209634] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2914.214830] syz-executor.0: attempt to access beyond end of device
[ 2914.214830] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2914.215823] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2914.222824] syz-executor.7: attempt to access beyond end of device
[ 2914.222824] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2914.223917] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2914.224997] syz-executor.3: attempt to access beyond end of device
[ 2914.224997] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2914.226036] Buffer I/O error on dev loop3, logical block 10, lost async page write
20:45:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34)

20:45:24 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@sha1={0x1, "9703a167438a7ec2687bdd0c8e968960edddecd2"}, 0x15, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:45:24 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r1 = openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='Zy\x00', 0xfffffffffffffffe, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r2, 0x0, 0xfffffdef)

[ 2914.314158] loop4: detected capacity change from 0 to 40
20:45:24 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:45:24 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 34)

20:45:24 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 34)

[ 2914.431817] loop1: detected capacity change from 0 to 40
[ 2914.434851] loop6: detected capacity change from 0 to 40
[ 2914.438173] loop5: detected capacity change from 0 to 40
[ 2914.473096] loop3: detected capacity change from 0 to 40
[ 2914.505431] loop0: detected capacity change from 0 to 40
[ 2914.516400] syz-executor.4: attempt to access beyond end of device
[ 2914.516400] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2914.517415] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2914.551232] syz-executor.5: attempt to access beyond end of device
[ 2914.551232] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2914.552097] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2914.615732] syz-executor.6: attempt to access beyond end of device
[ 2914.615732] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2914.617549] Buffer I/O error on dev loop6, logical block 10, lost async page write
20:45:24 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x40c23, 0x1, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 2914.790396] loop4: detected capacity change from 0 to 40
[ 2915.268187] loop7: detected capacity change from 0 to 40
[ 2915.271638] FAT-fs (loop7): Unrecognized mount option "./file0" or missing value
20:45:38 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:45:38 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35)

20:45:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x5, 0x80, 0x3, 0x81, 0x8, 0x5, 0x0, 0xfffffffffffffffb, 0x22024, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x354, 0x1, @perf_config_ext, 0xa200, 0x6, 0x1, 0x9, 0x5931, 0x1f, 0x8})

20:45:38 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:45:38 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 35)

20:45:38 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x268000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0, @ANYRES32=0x0], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xb}, 0x15182}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x2, 0x3, 0x1, 0x0, 0x0, 0x5, 0x2000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x4, 0x7}, 0x88, 0x64, 0x4, 0x0, 0x2, 0x3, 0x5, 0x0, 0x7fff, 0x0, 0x8000}, 0x0, 0xc, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r3, @ANYBLOB="10000000000004002e2f66696c653000b14ca144666013bd94babd393002919e160e149a686117945d3f0eecbeebaea72e0bd4bc74e8d1618b6022176959e59e8fe669dc16d90a650000000000000000"])
ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000300)=0x3)
sendfile(r3, r1, 0x0, 0xfffffdef)

20:45:38 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
r1 = openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r2, 0x0, 0xfffffdef)
r7 = perf_event_open(&(0x7f0000004900)={0x2, 0x80, 0x1f, 0x1, 0x5, 0x1, 0x0, 0x2, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000048c0), 0x6}, 0x0, 0xfff, 0xb81, 0x5, 0xfc03, 0x200, 0x6, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xb, r0, 0x1)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000004b00)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r8=>r4, @ANYBLOB="0200000000000000950517336f6dad61597f2620b0a9e2bd89c71c17d8105ec2688755069e86e52380a5c389b9061545a0df43b1c5ce7d75b6a59eb572afadd4f06c1db59844d7b7112dbdc1b86a3977fae5dad27b52ce803287ed9d40f456750ffd710cff0c0f801b320da2e84a36e7b5571d5102467f8b957949c716221ca7dfe70cbf7cacb6bc86f5875db4804567d4c092786a52f76771ced99695c7ba73222a1a8bd1fe764be6837cfd3a80d291bcb5698f6f43fed1f58543b3288f6ad1403cb8b537ab38e24ea4ee8d76f53d69e90be89a1fcf319a345bca8aec1ebc15dd1645ce"])
io_submit(0x0, 0xa, &(0x7f0000004a80)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3ff, r6, &(0x7f0000000400)="5478491da72c812d6b568370cecf142fed66ebf037bd0eebb49adda0023552211c55749df1166656091630ed0bd5abca0eaa8ca21bc680e74f66acc632f02e4a9b21402c0fc5ea7afdcf3a462598e2471ab2cf689479d1fdb28b292f5bfcc2964cd0e1f1431290f8741a12297be0ed45a84eb077a8656f94adfc635d3b00cf06e08a72466398feffb022a9edac6984d5e460b0cad79d5642a2f9889b4f7c3f69de94", 0xa2, 0x1, 0x0, 0x2, r2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x1, r4, &(0x7f00000004c0)="c31ce8d10b04ce821371ea528b26c212a6561ecdb7defdd62f8d1593dcdca508e7edc9c2541a929462cabce4cf8e3c9ce9312ce7e498df347c9287bcf727c26d54e89407dc46b19bf824de898d9db953d18a6eb67bd907c2d54c4e79b1c3d08180e927a4a49da4f6d797bc1d5cdf37982e0213cbf842b184bc99e74e0d5d7f02102760d5f80955fe22a7d07def4cdd5b3f391b22cc2ce683abce027afa10fc72bc937ad570", 0xa5, 0x2, 0x0, 0x2, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f00000005c0)="5e38bb24f4c53bf381aa76bf9185e752fcb76ebda9f0f07e5d33d7209e7f623eae48002c28ad9c01ebc578fa106e07f65f717c98234eabc1c55241", 0x3b, 0x6, 0x0, 0x1, r5}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0xfff8, 0xffffffffffffffff, &(0x7f0000000640)="a29ebe230bc89246a6d2e21111e373c3010f7d4d80ce0ce6dcb74cf0843ffd627514d5b6479a11b4d2400fd36c7ab745b9f213dca82a19d6cc3c193eae8d0e80b104917a91c8f7603bd67e95", 0x4c, 0x4, 0x0, 0x0, r5}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, &(0x7f0000000740)="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", 0x1000, 0x80, 0x0, 0x1, r2}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x5, 0x401, r2, &(0x7f0000001780)="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", 0x1000, 0xffffffff, 0x0, 0x3}, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x8, 0xfff, 0xffffffffffffffff, &(0x7f00000027c0)="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", 0x1000, 0x4, 0x0, 0x3, r2}, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x1, 0x5, r6, &(0x7f0000000700)="d6aa645af8e453ed2f6cd3ecf19134e1bb433050582cdc69ccd576695d6ef88954da3538a27baa11cda5cc673bd6", 0x2e, 0x4, 0x0, 0x1}, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0xb8, 0xffffffffffffffff, &(0x7f0000003880)="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", 0x1000, 0xff, 0x0, 0x2, r4}, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x7, 0x2, r7, &(0x7f0000004980)="bab74bb02ac8ec80a584b8cd446e3cbdec76fcd1a45c9ec1b6057b28576f4937b82410ae51b0b88b1c6a4a53f3a63707c9a1f562d2627953c537e6612fdfc1eb52b55d45facd79d5b4aec786f9ace5a4d22c65355433717dabc939542e1a31d4dbe72a34038229ed49dc6f69549631304efd20c1cc2b97cb0016d317fe", 0x7d, 0x9, 0x0, 0x0, r8}])

20:45:38 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 35)

[ 2928.907871] loop6: detected capacity change from 0 to 40
[ 2928.950126] loop3: detected capacity change from 0 to 40
[ 2928.953934] loop7: detected capacity change from 0 to 40
[ 2928.974758] loop5: detected capacity change from 0 to 40
[ 2928.977414] loop4: detected capacity change from 0 to 40
[ 2928.979315] loop0: detected capacity change from 0 to 40
[ 2928.982434] loop1: detected capacity change from 0 to 40
[ 2928.997156] bio_check_eod: 5 callbacks suppressed
[ 2928.997168] syz-executor.6: attempt to access beyond end of device
[ 2928.997168] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2928.998348] buffer_io_error: 5 callbacks suppressed
[ 2928.998357] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2929.061681] syz-executor.3: attempt to access beyond end of device
[ 2929.061681] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2929.062710] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2929.122989] syz-executor.5: attempt to access beyond end of device
[ 2929.122989] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2929.124861] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2929.153092] syz-executor.4: attempt to access beyond end of device
[ 2929.153092] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2929.155143] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2929.279390] syz-executor.7: attempt to access beyond end of device
[ 2929.279390] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2929.281515] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2929.292318] syz-executor.0: attempt to access beyond end of device
[ 2929.292318] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2929.293818] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2929.314268] syz-executor.1: attempt to access beyond end of device
[ 2929.314268] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2929.316945] Buffer I/O error on dev loop1, logical block 10, lost async page write
20:45:53 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000400)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r5, &(0x7f0000000180)='./file0/file0\x00', 0x410000, 0x108)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003, 0x100010, r2, 0x6eef3000)

20:45:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x0, 0x0, 0x2, 0x0, 0x79, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f"}, 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0)
r2 = openat(r1, &(0x7f0000000180)='./file1\x00', 0x102, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

20:45:53 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36)

20:45:53 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x0, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:45:53 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 36)

20:45:53 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0))
mount$cgroup2(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x12804a9, &(0x7f0000000400)={[{@memory_localevents}, {@subsystem='pids'}, {}, {@memory_localevents}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'V'}}, {@pcr={'pcr', 0x3d, 0x33}}]})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000180)={0x2, 0x0, 0xd})
openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x800, 0x0, 0xfff, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef)

20:45:53 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 36)

20:45:53 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000400)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x200000000000}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16=0x0])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=ANY=[@ANYBLOB="030302000000050081799cc72216d12735a047a783a08d806de19258048c4ab017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391be474"], 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/block/loop7', 0x210000, 0x1c)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2943.109289] loop3: detected capacity change from 0 to 40
[ 2943.111653] loop5: detected capacity change from 0 to 40
[ 2943.113159] loop7: detected capacity change from 0 to 264192
[ 2943.117310] loop6: detected capacity change from 0 to 40
[ 2943.130504] FAT-fs (loop7): Unrecognized mount option "ÿÿ" or missing value
[ 2943.132957] loop4: detected capacity change from 0 to 40
[ 2943.137355] loop1: detected capacity change from 0 to 40
[ 2943.140933] loop0: detected capacity change from 0 to 40
[ 2943.221998] syz-executor.5: attempt to access beyond end of device
[ 2943.221998] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2943.223621] Buffer I/O error on dev loop5, logical block 10, lost async page write
20:45:53 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x0, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 2943.370178] syz-executor.1: attempt to access beyond end of device
[ 2943.370178] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2943.372090] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2943.376956] syz-executor.0: attempt to access beyond end of device
[ 2943.376956] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2943.379028] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2943.398289] syz-executor.6: attempt to access beyond end of device
[ 2943.398289] loop6: rw=2049, sector=76, nr_sectors = 48 limit=40
[ 2943.409072] syz-executor.6: attempt to access beyond end of device
[ 2943.409072] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2943.410956] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2943.461371] syz-executor.3: attempt to access beyond end of device
[ 2943.461371] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2943.463773] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2943.488923] syz-executor.6: attempt to access beyond end of device
[ 2943.488923] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2943.490613] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2943.503123] syz-executor.4: attempt to access beyond end of device
[ 2943.503123] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2943.504713] loop5: detected capacity change from 0 to 40
[ 2943.506201] Buffer I/O error on dev loop4, logical block 10, lost async page write
20:45:53 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37)

20:45:53 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 37)

[ 2943.595392] syz-executor.5: attempt to access beyond end of device
[ 2943.595392] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2943.597341] Buffer I/O error on dev loop5, logical block 10, lost async page write
20:45:53 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
open(&(0x7f0000000180)='./file0\x00', 0x58000, 0x82)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

20:45:53 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x3, 0x2, 0x5, 0x81, "799cc72216d12735a0b017879e72e51d1615e5daf697179305f17de1225cfa50ec8366763bce953b0b64095945c2fb102c3946c9d2f9e1174f870d14f00e5f2609bea4d9246c4c9ef59b97d900c08f9e308a573f5e4562289b4ca4e9db97b8ac929c391b9a2bef3b963075989023a83c0ecee474cf1371a78f273567fee6c91546"}, 0x8a, 0x0)
openat(r0, &(0x7f00000003c0)='./file1\x00', 0x4001, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x8001, 0x7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendfile(r4, r1, 0x0, 0xfffffdef) (fail_nth: 37)

[ 2943.717905] loop0: detected capacity change from 0 to 40
[ 2943.728771] loop1: detected capacity change from 0 to 40
[ 2943.764966] loop3: detected capacity change from 0 to 40
[ 2943.790507] loop6: detected capacity change from 0 to 40
[ 2943.911857] syz-executor.1: attempt to access beyond end of device
[ 2943.911857] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2943.912013] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2943.912760] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2943.974985] loop7: detected capacity change from 0 to 264192
[ 2943.993298] FAT-fs (loop7): Unrecognized mount option "ÿÿ" or missing value
[ 2944.560940] ==================================================================
[ 2944.561837] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70
[ 2944.562599] Read of size 8 at addr ffff888044272528 by task syz-executor/13158
[ 2944.563426] 
[ 2944.563632] CPU: 1 PID: 13158 Comm: syz-executor Not tainted 6.1.0-rc8-next-20221206 #1
[ 2944.564521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2944.565452] Call Trace:
[ 2944.565753]  <TASK>
[ 2944.566020]  dump_stack_lvl+0x8f/0xb7
[ 2944.566473]  print_report+0x175/0x478
[ 2944.566928]  ? __lock_acquire+0x42c9/0x5e70
[ 2944.567439]  kasan_report+0xbf/0x1c0
[ 2944.567895]  ? __lock_acquire+0x42c9/0x5e70
[ 2944.568407]  __lock_acquire+0x42c9/0x5e70
[ 2944.568904]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 2944.569488]  ? finish_task_switch.isra.0+0x22d/0x8a0
[ 2944.570075]  ? __pfx___lock_acquire+0x10/0x10
[ 2944.570617]  ? __switch_to+0x5c3/0xee0
[ 2944.571094]  lock_acquire+0x1a6/0x530
[ 2944.571551]  ? kmemleak_scan+0x1a0/0x1600
[ 2944.572048]  ? __pfx_lock_acquire+0x10/0x10
[ 2944.572552]  ? __call_rcu_common.constprop.0+0x589/0xa40
[ 2944.573194]  ? __call_rcu_common.constprop.0+0x589/0xa40
[ 2944.577733]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2944.578272]  ? _raw_spin_lock_irq+0x45/0x50
[ 2944.578783]  _raw_spin_lock_irq+0x36/0x50
[ 2944.579272]  ? kmemleak_scan+0x1a0/0x1600
[ 2944.579767]  kmemleak_scan+0x1a0/0x1600
[ 2944.580247]  ? __pfx_kmemleak_scan+0x10/0x10
[ 2944.580779]  ? strncpy_from_user+0x107/0x500
[ 2944.581300]  kmemleak_write+0x574/0x680
[ 2944.581778]  ? __pfx_kmemleak_write+0x10/0x10
[ 2944.582315]  ? debugfs_file_get+0x1d2/0x450
[ 2944.582832]  ? __pfx_debugfs_file_get+0x10/0x10
[ 2944.583386]  full_proxy_write+0x121/0x190
[ 2944.583886]  vfs_write+0x358/0xe40
[ 2944.584322]  ? __pfx_full_proxy_write+0x10/0x10
[ 2944.584873]  ? __pfx_vfs_write+0x10/0x10
[ 2944.585372]  ? lock_release+0x3b6/0x750
[ 2944.585841]  ? __up_read+0x192/0x730
[ 2944.586295]  ? handle_mm_fault+0x43d/0xae0
[ 2944.586794]  ? __pfx___up_read+0x10/0x10
[ 2944.587285]  ? __fget_light+0x212/0x280
[ 2944.587765]  ksys_write+0x12b/0x260
[ 2944.588211]  ? __pfx_ksys_write+0x10/0x10
[ 2944.588716]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2944.589329]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2944.589934]  do_syscall_64+0x3f/0x90
[ 2944.590379]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2944.590981] RIP: 0033:0x7f097317b5c3
[ 2944.591416] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18
[ 2944.593434] RSP: 002b:00007ffc215a8738 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2944.594275] RAX: ffffffffffffffda RBX: 00007ffc215a8d78 RCX: 00007f097317b5c3
[ 2944.595068] RDX: 0000000000000004 RSI: 00007f0973231ed9 RDI: 0000000000000003
[ 2944.595857] RBP: 0000000000000002 R08: 0000000000000b80 R09: 00007ffc215c7080
[ 2944.596658] R10: 00007ffc215c7090 R11: 0000000000000246 R12: 00000000fffffff6
[ 2944.597453] R13: 00007ffc215aaef1 R14: 0000000000000000 R15: 00000000002cec05
[ 2944.598252]  </TASK>
[ 2944.598526] 
[ 2944.598728] Allocated by task 13161:
[ 2944.599142]  kasan_save_stack+0x22/0x50
[ 2944.599609]  kasan_set_track+0x25/0x30
[ 2944.600062]  __kasan_slab_alloc+0x5c/0x70
[ 2944.600544]  kmem_cache_alloc+0x1e1/0x410
[ 2944.601016]  __create_object+0x3d/0xc10
[ 2944.601504]  kmem_cache_alloc_lru+0x308/0x760
[ 2944.602023]  __d_alloc+0x31/0x9c0
[ 2944.602440]  d_alloc_parallel+0x10e/0x1530
[ 2944.602920]  lookup_open.isra.0+0x914/0x1250
[ 2944.603435]  path_openat+0x946/0x29b0
[ 2944.603879]  do_filp_open+0x1ba/0x410
[ 2944.604330]  do_sys_openat2+0x171/0x4c0
[ 2944.604791]  __x64_sys_openat+0x143/0x200
[ 2944.605272]  do_syscall_64+0x3f/0x90
[ 2944.605703]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2944.606297] 
[ 2944.606497] Freed by task 13143:
[ 2944.606879]  kasan_save_stack+0x22/0x50
[ 2944.607341]  kasan_set_track+0x25/0x30
[ 2944.607795]  kasan_save_free_info+0x2e/0x50
[ 2944.608284]  __kasan_slab_free+0x10a/0x190
[ 2944.608777]  kmem_cache_free+0xfb/0x610
[ 2944.609229]  rcu_core+0x7e2/0x2090
[ 2944.609659]  __do_softirq+0x1c7/0x8f9
[ 2944.610103] 
[ 2944.610300] Last potentially related work creation:
[ 2944.610838]  kasan_save_stack+0x22/0x50
[ 2944.611301]  __kasan_record_aux_stack+0x95/0xb0
[ 2944.611828]  __call_rcu_common.constprop.0+0x6a/0xa40
[ 2944.612424]  kmem_cache_free+0xc1/0x610
[ 2944.612884]  rcu_core+0x7e2/0x2090
[ 2944.613322]  __do_softirq+0x1c7/0x8f9
[ 2944.613768] 
[ 2944.613966] Second to last potentially related work creation:
[ 2944.614601]  kasan_save_stack+0x22/0x50
[ 2944.615057]  __kasan_record_aux_stack+0x95/0xb0
[ 2944.615586]  __call_rcu_common.constprop.0+0x6a/0xa40
[ 2944.616180]  kmem_cache_free_bulk.part.0+0x305/0x770
[ 2944.616766]  kfree_rcu_work+0x3fe/0xbe0
[ 2944.617232]  process_one_work+0xa17/0x16a0
[ 2944.617742]  worker_thread+0x63b/0x1260
[ 2944.618207]  kthread+0x2f1/0x3a0
[ 2944.618604]  ret_from_fork+0x2c/0x50
[ 2944.619042] 
[ 2944.619246] The buggy address belongs to the object at ffff888044272510
[ 2944.619246]  which belongs to the cache kmemleak_object of size 368
[ 2944.620617] The buggy address is located 24 bytes inside of
[ 2944.620617]  368-byte region [ffff888044272510, ffff888044272680)
[ 2944.621875] 
[ 2944.622074] The buggy address belongs to the physical page:
[ 2944.622684] page:0000000078567548 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44272
[ 2944.623914] head:0000000078567548 order:1 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0
[ 2944.625248] flags: 0x100000000010200(slab|head|node=0|zone=1)
[ 2944.626161] raw: 0100000000010200 ffff88800844f780 ffffea00003e6600 dead000000000002
[ 2944.627272] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000
[ 2944.628369] page dumped because: kasan: bad access detected
[ 2944.629009] 
[ 2944.629210] Memory state around the buggy address:
[ 2944.629761]  ffff888044272400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2944.630615]  ffff888044272480: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc
[ 2944.631404] >ffff888044272500: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2944.632198]                                   ^
[ 2944.632703]  ffff888044272580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2944.633522]  ffff888044272600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2944.634312] ==================================================================
[ 2944.635091] Disabling lock debugging due to kernel taint

VM DIAGNOSIS:
20:45:54  Registers:
info registers vcpu 0
RAX=ffff8880229079a8 RBX=0000000000000001 RCX=ffff888022907980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000001 RBP=ffff8880229077f0 RSP=ffff888022907718
R8 =ffffffff860d73d0 R9 =ffffffff860d73d4 R10=ffffed1004520f00 R11=0000000000038001
R12=ffff8880229077d9 R13=ffff8880229077f8 R14=ffff888022907798 R15=ffffffff860d73d5
RIP=ffffffff8112e51e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fdd06b328c0 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe64d8c95000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe64d8c93000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563276900e70 CR3=0000000017dfe000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000ff0000000000ff0000 XMM03=0000000000ff0000000000ff000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffffffffffff0000ffffffff0000ff00
XMM06=000000000000654c000000006801000a XMM07=00000000000000000000000000000000
XMM08=732f636f72702f006b63616d7300632e XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000000005f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8248b635 RDI=ffffffff87fb5b60 RBP=ffffffff87fb5b20 RSP=ffff88804666f1e8
R8 =0000000000000001 R9 =000000000000000a R10=000000000000005f R11=0000000000000001
R12=000000000000005f R13=ffffffff87fb5b20 R14=0000000000000010 R15=ffffffff8248b620
RIP=ffffffff8248b68d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556372400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0269364000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0269362000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc58432020 CR3=000000003bb98000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000010000000f000056327906f890
XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973
XMM04=0035353734373036323d44455a494c41 XMM05=3d4d554e51455300313d5145534b5349
XMM06=706f6f6c2f7665642f3d454d414e5645 XMM07=5f4b534944006b636f6c623d4d455453
XMM08=49006d756e203c2069000a313a56000a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000