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", 0x1041, 0x4}], 0x148636daa0f03118, &(0x7f00000038c0)={[{@fat=@check_strict}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_mixed}, {@nonumtail}, {@utf8}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x35, 0x35, 0x62, 0x61, 0x37, 0x35, 0x61], 0x2d, [0x39, 0x35, 0x38, 0x36], 0x2d, [0x33, 0x32, 0x66, 0x30], 0x2d, [0x37, 0x64, 0x30, 0x39], 0x2d, [0x62, 0x31, 0x62, 0x35, 0xd, 0x65, 0x35, 0x31]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_eq}, {@fowner_lt={'fowner<', 0xee00}}, {@euid_eq={'euid', 0x3d, 0xee00}}]})
openat(r3, &(0x7f0000000480)='./file1\x00', 0x28000, 0x100)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40383, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
setxattr$incfs_id(&(0x7f0000003800)='./file1\x00', &(0x7f0000003840), &(0x7f0000003880)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3)
syncfs(0xffffffffffffffff)
sendfile(r2, r1, 0x0, 0xfffffdef)

13:53:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:53:37 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x1f00, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2541.862720] FAT-fs (loop5): bogus number of reserved sectors
[ 2541.863703] FAT-fs (loop5): Can't find a valid FAT filesystem
13:53:37 executing program 4:
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:53:37 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:53:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27)

13:53:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:53:37 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000006c0))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000740)={{<r2=>0x0, 0x40, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0x9, 0x1f, 0x80, 0x3ff00000, 0x3, 0xf614, 0x5ab9e75}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000800)={{r2, 0x5, 0x6, 0x3, 0x80000001, 0xe66, 0x7f, 0x1, 0x7, 0x3, 0x40000, 0xa101, 0x8, 0xff, 0x5}, 0x10, [0x0, 0x0]})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000880)={0x1, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x1, 'none\x00', 0x1c, 0x2, 0x58}, 0x2c)
pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)="09bd38f60f9377103b377ccdea91f68607f4480d6dd63e06c969d228f1c3221e3455a25f9fd5a54abcab77e499f847e1be0ef66e76704085c68e0a09d4fc01f7c1b1c9542b30e1d0b38f6b83500257fb5a81cf35aac61ad732547bfc5dea4dbe5019b3cfaed3b291864f8b96b1349b66e225eecd4c365e95dcc1517b16113660683f8b3bbaf1af61ab0e03e121a92297c84747bf61616627bf9b59df1a9803a861a7ae559b123a81a3490a9e0aa3d89d7e476ac136e1544bfe37a990d68c5f89e9c544e920849ceef7d94e3fb99191fc7b89683aed47cbb314a56c5de13d524c9ae9", 0xe2}, {&(0x7f00000009c0)="6fe32d1b6d36ea6765ebfbd537e7c54af738c7e6e1b66aba7ddfaec3675a65e5921afa001137718c72b8f36925d3b27c25d9f7f1b49e6a7ca34eab30638e5496adbd44a7916159e8f8670850bf92bc9196f814bac6010b360cdb5d51fabf06e6f27579f2213df33bc72f17a8c991b60e7a55606b8074fc183e89cb9a8bfb", 0x7e}, {&(0x7f0000000a40)="4a5d278202be05aff96c8ffed13be01a154c443bc12ee4d7e727f207579d6d21a849ac5848d2aa3704ee8f61e051449eed35c1ee84d3d19e41517c5c10f83d3d7a761b345b033c12b5e2b0d43f18394f4d1c67cb8e2c3f4a029753447c44635cf39a464610fb3dc6464d73f8", 0x6c}, {&(0x7f0000000ac0)="7b26706b831d3ee149e35ad85fb9367612e1b3df84a0c72b7b1781fb75", 0x1d}, {&(0x7f0000000b00)="101ada5036eb89bff02110ed73f759f856a8330edff6bd0cc416255f7afe74e6047e07314029e009e20f0be848779ecc8e06de", 0x33}, {&(0x7f0000000b40)="7f7b17a864b68f94fff9154a8ac06068ba0263fee407d589c0cbe96d67c9bfade0425baf907f13142f4b88e74b2c6c94ba9069a939d5e0c0a149858a9198e74e5f8d0e", 0x43}, {&(0x7f0000000bc0)="e399698ea37214c6faabf38227cd2ec1315e70118665d2f8bc1f5b262bb9a535e975cd0daea76ed7b7611dcfab2fc6a058b60b82266fa1c42c71d5d5289a9cd24b91babe5814adcb9731b9ee8ad105fc64a3edecebe1d36bf2624060dbb1e5bd4212c87ac2f2d05c97c1270c7327af8dff3345b1ccdcd27f6f653fe704e1aba2201f1b98dc3aa04e3863ba602f237829a9cbc5af6d91bd245bd4f52c988e9f5857352d3a4da1a66ab76fcc496c4effeaa3641ef982f275e07f80e2729ade8b94", 0xc0}], 0x7, 0x6, 0x3f)
lseek(r0, 0xfffffffffffffff8, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/udplite6\x00')
kcmp(0x0, 0x0, 0x3, r0, r3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000dc0)={0x2, 0x6, 0x1, 'queue1\x00', 0x1000})
ioctl$CDROMVOLCTRL(r0, 0x530a, 0x0)

[ 2541.889533] loop6: detected capacity change from 0 to 40
[ 2541.944379] loop3: detected capacity change from 0 to 40
[ 2541.970596] syz-executor.6: attempt to access beyond end of device
[ 2541.970596] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2541.971667] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:53:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:53:38 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000006c0))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000740)={{<r2=>0x0, 0x40, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0x9, 0x1f, 0x80, 0x3ff00000, 0x3, 0xf614, 0x5ab9e75}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000800)={{r2, 0x5, 0x6, 0x3, 0x80000001, 0xe66, 0x7f, 0x1, 0x7, 0x3, 0x40000, 0xa101, 0x8, 0xff, 0x5}, 0x10, [0x0, 0x0]})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000880)={0x1, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x1, 'none\x00', 0x1c, 0x2, 0x58}, 0x2c)
pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)="09bd38f60f9377103b377ccdea91f68607f4480d6dd63e06c969d228f1c3221e3455a25f9fd5a54abcab77e499f847e1be0ef66e76704085c68e0a09d4fc01f7c1b1c9542b30e1d0b38f6b83500257fb5a81cf35aac61ad732547bfc5dea4dbe5019b3cfaed3b291864f8b96b1349b66e225eecd4c365e95dcc1517b16113660683f8b3bbaf1af61ab0e03e121a92297c84747bf61616627bf9b59df1a9803a861a7ae559b123a81a3490a9e0aa3d89d7e476ac136e1544bfe37a990d68c5f89e9c544e920849ceef7d94e3fb99191fc7b89683aed47cbb314a56c5de13d524c9ae9", 0xe2}, {&(0x7f00000009c0)="6fe32d1b6d36ea6765ebfbd537e7c54af738c7e6e1b66aba7ddfaec3675a65e5921afa001137718c72b8f36925d3b27c25d9f7f1b49e6a7ca34eab30638e5496adbd44a7916159e8f8670850bf92bc9196f814bac6010b360cdb5d51fabf06e6f27579f2213df33bc72f17a8c991b60e7a55606b8074fc183e89cb9a8bfb", 0x7e}, {&(0x7f0000000a40)="4a5d278202be05aff96c8ffed13be01a154c443bc12ee4d7e727f207579d6d21a849ac5848d2aa3704ee8f61e051449eed35c1ee84d3d19e41517c5c10f83d3d7a761b345b033c12b5e2b0d43f18394f4d1c67cb8e2c3f4a029753447c44635cf39a464610fb3dc6464d73f8", 0x6c}, {&(0x7f0000000ac0)="7b26706b831d3ee149e35ad85fb9367612e1b3df84a0c72b7b1781fb75", 0x1d}, {&(0x7f0000000b00)="101ada5036eb89bff02110ed73f759f856a8330edff6bd0cc416255f7afe74e6047e07314029e009e20f0be848779ecc8e06de", 0x33}, {&(0x7f0000000b40)="7f7b17a864b68f94fff9154a8ac06068ba0263fee407d589c0cbe96d67c9bfade0425baf907f13142f4b88e74b2c6c94ba9069a939d5e0c0a149858a9198e74e5f8d0e", 0x43}, {&(0x7f0000000bc0)="e399698ea37214c6faabf38227cd2ec1315e70118665d2f8bc1f5b262bb9a535e975cd0daea76ed7b7611dcfab2fc6a058b60b82266fa1c42c71d5d5289a9cd24b91babe5814adcb9731b9ee8ad105fc64a3edecebe1d36bf2624060dbb1e5bd4212c87ac2f2d05c97c1270c7327af8dff3345b1ccdcd27f6f653fe704e1aba2201f1b98dc3aa04e3863ba602f237829a9cbc5af6d91bd245bd4f52c988e9f5857352d3a4da1a66ab76fcc496c4effeaa3641ef982f275e07f80e2729ade8b94", 0xc0}], 0x7, 0x6, 0x3f)
lseek(r0, 0xfffffffffffffff8, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/udplite6\x00')
kcmp(0x0, 0x0, 0x3, r0, r3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000dc0)={0x2, 0x6, 0x1, 'queue1\x00', 0x1000})
ioctl$CDROMVOLCTRL(r0, 0x530a, 0x0)

13:53:38 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:53:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28)

13:53:38 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x4e02, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:53:38 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:53:38 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2542.173422] FAT-fs (loop5): bogus number of reserved sectors
[ 2542.173964] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2542.187876] loop3: detected capacity change from 0 to 40
[ 2542.217514] loop6: detected capacity change from 0 to 40
[ 2542.239013] loop4: detected capacity change from 0 to 40
13:53:38 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000006c0))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000740)={{<r2=>0x0, 0x40, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0x9, 0x1f, 0x80, 0x3ff00000, 0x3, 0xf614, 0x5ab9e75}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000800)={{r2, 0x5, 0x6, 0x3, 0x80000001, 0xe66, 0x7f, 0x1, 0x7, 0x3, 0x40000, 0xa101, 0x8, 0xff, 0x5}, 0x10, [0x0, 0x0]})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000880)={0x1, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x1, 'none\x00', 0x1c, 0x2, 0x58}, 0x2c)
pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)="09bd38f60f9377103b377ccdea91f68607f4480d6dd63e06c969d228f1c3221e3455a25f9fd5a54abcab77e499f847e1be0ef66e76704085c68e0a09d4fc01f7c1b1c9542b30e1d0b38f6b83500257fb5a81cf35aac61ad732547bfc5dea4dbe5019b3cfaed3b291864f8b96b1349b66e225eecd4c365e95dcc1517b16113660683f8b3bbaf1af61ab0e03e121a92297c84747bf61616627bf9b59df1a9803a861a7ae559b123a81a3490a9e0aa3d89d7e476ac136e1544bfe37a990d68c5f89e9c544e920849ceef7d94e3fb99191fc7b89683aed47cbb314a56c5de13d524c9ae9", 0xe2}, {&(0x7f00000009c0)="6fe32d1b6d36ea6765ebfbd537e7c54af738c7e6e1b66aba7ddfaec3675a65e5921afa001137718c72b8f36925d3b27c25d9f7f1b49e6a7ca34eab30638e5496adbd44a7916159e8f8670850bf92bc9196f814bac6010b360cdb5d51fabf06e6f27579f2213df33bc72f17a8c991b60e7a55606b8074fc183e89cb9a8bfb", 0x7e}, {&(0x7f0000000a40)="4a5d278202be05aff96c8ffed13be01a154c443bc12ee4d7e727f207579d6d21a849ac5848d2aa3704ee8f61e051449eed35c1ee84d3d19e41517c5c10f83d3d7a761b345b033c12b5e2b0d43f18394f4d1c67cb8e2c3f4a029753447c44635cf39a464610fb3dc6464d73f8", 0x6c}, {&(0x7f0000000ac0)="7b26706b831d3ee149e35ad85fb9367612e1b3df84a0c72b7b1781fb75", 0x1d}, {&(0x7f0000000b00)="101ada5036eb89bff02110ed73f759f856a8330edff6bd0cc416255f7afe74e6047e07314029e009e20f0be848779ecc8e06de", 0x33}, {&(0x7f0000000b40)="7f7b17a864b68f94fff9154a8ac06068ba0263fee407d589c0cbe96d67c9bfade0425baf907f13142f4b88e74b2c6c94ba9069a939d5e0c0a149858a9198e74e5f8d0e", 0x43}, {&(0x7f0000000bc0)="e399698ea37214c6faabf38227cd2ec1315e70118665d2f8bc1f5b262bb9a535e975cd0daea76ed7b7611dcfab2fc6a058b60b82266fa1c42c71d5d5289a9cd24b91babe5814adcb9731b9ee8ad105fc64a3edecebe1d36bf2624060dbb1e5bd4212c87ac2f2d05c97c1270c7327af8dff3345b1ccdcd27f6f653fe704e1aba2201f1b98dc3aa04e3863ba602f237829a9cbc5af6d91bd245bd4f52c988e9f5857352d3a4da1a66ab76fcc496c4effeaa3641ef982f275e07f80e2729ade8b94", 0xc0}], 0x7, 0x6, 0x3f)
lseek(r0, 0xfffffffffffffff8, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/udplite6\x00')
kcmp(0x0, 0x0, 0x3, r0, r3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000dc0)={0x2, 0x6, 0x1, 'queue1\x00', 0x1000})
ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000e80)={0x0, 0x0, 0x1, 0x5})

[ 2542.363020] syz-executor.6: attempt to access beyond end of device
[ 2542.363020] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2542.365051] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:53:53 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:53:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:53:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:53:53 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010a0000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
mount$cgroup2(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x110044, &(0x7f0000000500)=ANY=[@ANYBLOB='memory_recursiveprot,memory,memory_recursiveprot,smackfshat=+!,func=MMAP_CHECK,uid=', @ANYRESDEC=0x0, @ANYBLOB="62c6ce95eea98d26ba9b343ebf31a4314db5a27e671fe51acce106a018f398bbe5da5b37533eeac8f8e6b71a390e0bc77d5f64850ba72c798bdb84adece6745500"/79, @ANYRESDEC=r4, @ANYBLOB=',pcr=00000000000000000058,smackfshat=vfat\x00,smackfsdef=vfat\x00,uid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])

13:53:53 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000006c0))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000740)={{<r2=>0x0, 0x40, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0x9, 0x1f, 0x80, 0x3ff00000, 0x3, 0xf614, 0x5ab9e75}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000800)={{r2, 0x5, 0x6, 0x3, 0x80000001, 0xe66, 0x7f, 0x1, 0x7, 0x3, 0x40000, 0xa101, 0x8, 0xff, 0x5}, 0x10, [0x0, 0x0]})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000880)={0x1, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x1, 'none\x00', 0x1c, 0x2, 0x58}, 0x2c)
pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)="09bd38f60f9377103b377ccdea91f68607f4480d6dd63e06c969d228f1c3221e3455a25f9fd5a54abcab77e499f847e1be0ef66e76704085c68e0a09d4fc01f7c1b1c9542b30e1d0b38f6b83500257fb5a81cf35aac61ad732547bfc5dea4dbe5019b3cfaed3b291864f8b96b1349b66e225eecd4c365e95dcc1517b16113660683f8b3bbaf1af61ab0e03e121a92297c84747bf61616627bf9b59df1a9803a861a7ae559b123a81a3490a9e0aa3d89d7e476ac136e1544bfe37a990d68c5f89e9c544e920849ceef7d94e3fb99191fc7b89683aed47cbb314a56c5de13d524c9ae9", 0xe2}, {&(0x7f00000009c0)="6fe32d1b6d36ea6765ebfbd537e7c54af738c7e6e1b66aba7ddfaec3675a65e5921afa001137718c72b8f36925d3b27c25d9f7f1b49e6a7ca34eab30638e5496adbd44a7916159e8f8670850bf92bc9196f814bac6010b360cdb5d51fabf06e6f27579f2213df33bc72f17a8c991b60e7a55606b8074fc183e89cb9a8bfb", 0x7e}, {&(0x7f0000000a40)="4a5d278202be05aff96c8ffed13be01a154c443bc12ee4d7e727f207579d6d21a849ac5848d2aa3704ee8f61e051449eed35c1ee84d3d19e41517c5c10f83d3d7a761b345b033c12b5e2b0d43f18394f4d1c67cb8e2c3f4a029753447c44635cf39a464610fb3dc6464d73f8", 0x6c}, {&(0x7f0000000ac0)="7b26706b831d3ee149e35ad85fb9367612e1b3df84a0c72b7b1781fb75", 0x1d}, {&(0x7f0000000b00)="101ada5036eb89bff02110ed73f759f856a8330edff6bd0cc416255f7afe74e6047e07314029e009e20f0be848779ecc8e06de", 0x33}, {&(0x7f0000000b40)="7f7b17a864b68f94fff9154a8ac06068ba0263fee407d589c0cbe96d67c9bfade0425baf907f13142f4b88e74b2c6c94ba9069a939d5e0c0a149858a9198e74e5f8d0e", 0x43}, {&(0x7f0000000bc0)="e399698ea37214c6faabf38227cd2ec1315e70118665d2f8bc1f5b262bb9a535e975cd0daea76ed7b7611dcfab2fc6a058b60b82266fa1c42c71d5d5289a9cd24b91babe5814adcb9731b9ee8ad105fc64a3edecebe1d36bf2624060dbb1e5bd4212c87ac2f2d05c97c1270c7327af8dff3345b1ccdcd27f6f653fe704e1aba2201f1b98dc3aa04e3863ba602f237829a9cbc5af6d91bd245bd4f52c988e9f5857352d3a4da1a66ab76fcc496c4effeaa3641ef982f275e07f80e2729ade8b94", 0xc0}], 0x7, 0x6, 0x3f)
lseek(r0, 0xfffffffffffffff8, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/udplite6\x00')
kcmp(0x0, 0x0, 0x3, r0, r3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000dc0)={0x2, 0x6, 0x1, 'queue1\x00', 0x1000})
ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000e80)={0x0, 0x0, 0x1, 0x5})

13:53:53 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:53:53 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xc00e, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:53:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29)

[ 2557.123691] loop4: detected capacity change from 0 to 40
[ 2557.130384] loop6: detected capacity change from 0 to 40
[ 2557.133329] loop3: detected capacity change from 0 to 40
[ 2557.142878] FAT-fs (loop5): bogus number of reserved sectors
[ 2557.143764] FAT-fs (loop5): Can't find a valid FAT filesystem
13:53:53 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000006c0))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000740)={{<r2=>0x0, 0x40, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0x9, 0x1f, 0x80, 0x3ff00000, 0x3, 0xf614, 0x5ab9e75}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000800)={{r2, 0x5, 0x6, 0x3, 0x80000001, 0xe66, 0x7f, 0x1, 0x7, 0x3, 0x40000, 0xa101, 0x8, 0xff, 0x5}, 0x10, [0x0, 0x0]})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000880)={0x1, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x1, 'none\x00', 0x1c, 0x2, 0x58}, 0x2c)
pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)="09bd38f60f9377103b377ccdea91f68607f4480d6dd63e06c969d228f1c3221e3455a25f9fd5a54abcab77e499f847e1be0ef66e76704085c68e0a09d4fc01f7c1b1c9542b30e1d0b38f6b83500257fb5a81cf35aac61ad732547bfc5dea4dbe5019b3cfaed3b291864f8b96b1349b66e225eecd4c365e95dcc1517b16113660683f8b3bbaf1af61ab0e03e121a92297c84747bf61616627bf9b59df1a9803a861a7ae559b123a81a3490a9e0aa3d89d7e476ac136e1544bfe37a990d68c5f89e9c544e920849ceef7d94e3fb99191fc7b89683aed47cbb314a56c5de13d524c9ae9", 0xe2}, {&(0x7f00000009c0)="6fe32d1b6d36ea6765ebfbd537e7c54af738c7e6e1b66aba7ddfaec3675a65e5921afa001137718c72b8f36925d3b27c25d9f7f1b49e6a7ca34eab30638e5496adbd44a7916159e8f8670850bf92bc9196f814bac6010b360cdb5d51fabf06e6f27579f2213df33bc72f17a8c991b60e7a55606b8074fc183e89cb9a8bfb", 0x7e}, {&(0x7f0000000a40)="4a5d278202be05aff96c8ffed13be01a154c443bc12ee4d7e727f207579d6d21a849ac5848d2aa3704ee8f61e051449eed35c1ee84d3d19e41517c5c10f83d3d7a761b345b033c12b5e2b0d43f18394f4d1c67cb8e2c3f4a029753447c44635cf39a464610fb3dc6464d73f8", 0x6c}, {&(0x7f0000000ac0)="7b26706b831d3ee149e35ad85fb9367612e1b3df84a0c72b7b1781fb75", 0x1d}, {&(0x7f0000000b00)="101ada5036eb89bff02110ed73f759f856a8330edff6bd0cc416255f7afe74e6047e07314029e009e20f0be848779ecc8e06de", 0x33}, {&(0x7f0000000b40)="7f7b17a864b68f94fff9154a8ac06068ba0263fee407d589c0cbe96d67c9bfade0425baf907f13142f4b88e74b2c6c94ba9069a939d5e0c0a149858a9198e74e5f8d0e", 0x43}, {&(0x7f0000000bc0)="e399698ea37214c6faabf38227cd2ec1315e70118665d2f8bc1f5b262bb9a535e975cd0daea76ed7b7611dcfab2fc6a058b60b82266fa1c42c71d5d5289a9cd24b91babe5814adcb9731b9ee8ad105fc64a3edecebe1d36bf2624060dbb1e5bd4212c87ac2f2d05c97c1270c7327af8dff3345b1ccdcd27f6f653fe704e1aba2201f1b98dc3aa04e3863ba602f237829a9cbc5af6d91bd245bd4f52c988e9f5857352d3a4da1a66ab76fcc496c4effeaa3641ef982f275e07f80e2729ade8b94", 0xc0}], 0x7, 0x6, 0x3f)
lseek(r0, 0xfffffffffffffff8, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/udplite6\x00')
kcmp(0x0, 0x0, 0x3, r0, r3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000dc0)={0x2, 0x6, 0x1, 'queue1\x00', 0x1000})
ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000e80)={0x0, 0x0, 0x1, 0x5})

13:53:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2557.343770] syz-executor.6: attempt to access beyond end of device
[ 2557.343770] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2557.345645] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:53:53 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000006c0))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000740)={{<r2=>0x0, 0x40, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0x9, 0x1f, 0x80, 0x3ff00000, 0x3, 0xf614, 0x5ab9e75}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000800)={{r2, 0x5, 0x6, 0x3, 0x80000001, 0xe66, 0x7f, 0x1, 0x7, 0x3, 0x40000, 0xa101, 0x8, 0xff, 0x5}, 0x10, [0x0, 0x0]})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000880)={0x1, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x1, 'none\x00', 0x1c, 0x2, 0x58}, 0x2c)
pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)="09bd38f60f9377103b377ccdea91f68607f4480d6dd63e06c969d228f1c3221e3455a25f9fd5a54abcab77e499f847e1be0ef66e76704085c68e0a09d4fc01f7c1b1c9542b30e1d0b38f6b83500257fb5a81cf35aac61ad732547bfc5dea4dbe5019b3cfaed3b291864f8b96b1349b66e225eecd4c365e95dcc1517b16113660683f8b3bbaf1af61ab0e03e121a92297c84747bf61616627bf9b59df1a9803a861a7ae559b123a81a3490a9e0aa3d89d7e476ac136e1544bfe37a990d68c5f89e9c544e920849ceef7d94e3fb99191fc7b89683aed47cbb314a56c5de13d524c9ae9", 0xe2}, {&(0x7f00000009c0)="6fe32d1b6d36ea6765ebfbd537e7c54af738c7e6e1b66aba7ddfaec3675a65e5921afa001137718c72b8f36925d3b27c25d9f7f1b49e6a7ca34eab30638e5496adbd44a7916159e8f8670850bf92bc9196f814bac6010b360cdb5d51fabf06e6f27579f2213df33bc72f17a8c991b60e7a55606b8074fc183e89cb9a8bfb", 0x7e}, {&(0x7f0000000a40)="4a5d278202be05aff96c8ffed13be01a154c443bc12ee4d7e727f207579d6d21a849ac5848d2aa3704ee8f61e051449eed35c1ee84d3d19e41517c5c10f83d3d7a761b345b033c12b5e2b0d43f18394f4d1c67cb8e2c3f4a029753447c44635cf39a464610fb3dc6464d73f8", 0x6c}, {&(0x7f0000000ac0)="7b26706b831d3ee149e35ad85fb9367612e1b3df84a0c72b7b1781fb75", 0x1d}, {&(0x7f0000000b00)="101ada5036eb89bff02110ed73f759f856a8330edff6bd0cc416255f7afe74e6047e07314029e009e20f0be848779ecc8e06de", 0x33}, {&(0x7f0000000b40)="7f7b17a864b68f94fff9154a8ac06068ba0263fee407d589c0cbe96d67c9bfade0425baf907f13142f4b88e74b2c6c94ba9069a939d5e0c0a149858a9198e74e5f8d0e", 0x43}, {&(0x7f0000000bc0)="e399698ea37214c6faabf38227cd2ec1315e70118665d2f8bc1f5b262bb9a535e975cd0daea76ed7b7611dcfab2fc6a058b60b82266fa1c42c71d5d5289a9cd24b91babe5814adcb9731b9ee8ad105fc64a3edecebe1d36bf2624060dbb1e5bd4212c87ac2f2d05c97c1270c7327af8dff3345b1ccdcd27f6f653fe704e1aba2201f1b98dc3aa04e3863ba602f237829a9cbc5af6d91bd245bd4f52c988e9f5857352d3a4da1a66ab76fcc496c4effeaa3641ef982f275e07f80e2729ade8b94", 0xc0}], 0x7, 0x6, 0x3f)
lseek(r0, 0xfffffffffffffff8, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/udplite6\x00')
kcmp(0x0, 0x0, 0x3, r0, r3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000dc0)={0x2, 0x6, 0x1, 'queue1\x00', 0x1000})
ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000e80)={0x1, 0x0, 0x0, 0x5})

13:53:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:53:53 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:53:53 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2557.408417] FAT-fs (loop5): bogus number of reserved sectors
[ 2557.409199] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2557.415594] loop3: detected capacity change from 0 to 40
[ 2557.435761] loop4: detected capacity change from 0 to 40
13:53:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2557.540067] loop3: detected capacity change from 0 to 40
13:53:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30)

13:53:53 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:53:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:53:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2557.700987] loop3: detected capacity change from 0 to 40
[ 2557.828980] loop6: detected capacity change from 0 to 40
[ 2557.905636] FAT-fs (loop5): bogus number of reserved sectors
[ 2557.906530] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2557.951471] syz-executor.6: attempt to access beyond end of device
[ 2557.951471] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2557.953397] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:54:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:54:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:54:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x2e, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:54:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:54:12 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:54:12 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xff00, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:54:12 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31)

13:54:12 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000006c0))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000740)={{<r2=>0x0, 0x40, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0x9, 0x1f, 0x80, 0x3ff00000, 0x3, 0xf614, 0x5ab9e75}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000800)={{r2, 0x5, 0x6, 0x3, 0x80000001, 0xe66, 0x7f, 0x1, 0x7, 0x3, 0x40000, 0xa101, 0x8, 0xff, 0x5}, 0x10, [0x0, 0x0]})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000880)={0x1, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x1, 'none\x00', 0x1c, 0x2, 0x58}, 0x2c)
pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)="09bd38f60f9377103b377ccdea91f68607f4480d6dd63e06c969d228f1c3221e3455a25f9fd5a54abcab77e499f847e1be0ef66e76704085c68e0a09d4fc01f7c1b1c9542b30e1d0b38f6b83500257fb5a81cf35aac61ad732547bfc5dea4dbe5019b3cfaed3b291864f8b96b1349b66e225eecd4c365e95dcc1517b16113660683f8b3bbaf1af61ab0e03e121a92297c84747bf61616627bf9b59df1a9803a861a7ae559b123a81a3490a9e0aa3d89d7e476ac136e1544bfe37a990d68c5f89e9c544e920849ceef7d94e3fb99191fc7b89683aed47cbb314a56c5de13d524c9ae9", 0xe2}, {&(0x7f00000009c0)="6fe32d1b6d36ea6765ebfbd537e7c54af738c7e6e1b66aba7ddfaec3675a65e5921afa001137718c72b8f36925d3b27c25d9f7f1b49e6a7ca34eab30638e5496adbd44a7916159e8f8670850bf92bc9196f814bac6010b360cdb5d51fabf06e6f27579f2213df33bc72f17a8c991b60e7a55606b8074fc183e89cb9a8bfb", 0x7e}, {&(0x7f0000000a40)="4a5d278202be05aff96c8ffed13be01a154c443bc12ee4d7e727f207579d6d21a849ac5848d2aa3704ee8f61e051449eed35c1ee84d3d19e41517c5c10f83d3d7a761b345b033c12b5e2b0d43f18394f4d1c67cb8e2c3f4a029753447c44635cf39a464610fb3dc6464d73f8", 0x6c}, {&(0x7f0000000ac0)="7b26706b831d3ee149e35ad85fb9367612e1b3df84a0c72b7b1781fb75", 0x1d}, {&(0x7f0000000b00)="101ada5036eb89bff02110ed73f759f856a8330edff6bd0cc416255f7afe74e6047e07314029e009e20f0be848779ecc8e06de", 0x33}, {&(0x7f0000000b40)="7f7b17a864b68f94fff9154a8ac06068ba0263fee407d589c0cbe96d67c9bfade0425baf907f13142f4b88e74b2c6c94ba9069a939d5e0c0a149858a9198e74e5f8d0e", 0x43}, {&(0x7f0000000bc0)="e399698ea37214c6faabf38227cd2ec1315e70118665d2f8bc1f5b262bb9a535e975cd0daea76ed7b7611dcfab2fc6a058b60b82266fa1c42c71d5d5289a9cd24b91babe5814adcb9731b9ee8ad105fc64a3edecebe1d36bf2624060dbb1e5bd4212c87ac2f2d05c97c1270c7327af8dff3345b1ccdcd27f6f653fe704e1aba2201f1b98dc3aa04e3863ba602f237829a9cbc5af6d91bd245bd4f52c988e9f5857352d3a4da1a66ab76fcc496c4effeaa3641ef982f275e07f80e2729ade8b94", 0xc0}], 0x7, 0x6, 0x3f)
lseek(r0, 0xfffffffffffffff8, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/udplite6\x00')
kcmp(0x0, 0x0, 0x3, r0, r3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000dc0)={0x2, 0x6, 0x1, 'queue1\x00', 0x1000})
ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000e80)={0x1, 0x0, 0x0, 0x5})

[ 2576.641053] loop6: detected capacity change from 0 to 40
[ 2576.655217] loop4: detected capacity change from 0 to 40
[ 2576.673611] loop5: detected capacity change from 0 to 40
[ 2576.682446] FAT-fs (loop5): bogus number of reserved sectors
[ 2576.682896] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2576.698315] syz-executor.6: attempt to access beyond end of device
[ 2576.698315] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2576.699204] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2576.701041] loop3: detected capacity change from 0 to 40
13:54:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:54:30 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000006c0))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000740)={{<r2=>0x0, 0x40, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0x9, 0x1f, 0x80, 0x3ff00000, 0x3, 0xf614, 0x5ab9e75}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000800)={{r2, 0x5, 0x6, 0x3, 0x80000001, 0xe66, 0x7f, 0x1, 0x7, 0x3, 0x40000, 0xa101, 0x8, 0xff, 0x5}, 0x10, [0x0, 0x0]})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000880)={0x1, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x1, 'none\x00', 0x1c, 0x2, 0x58}, 0x2c)
pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)="09bd38f60f9377103b377ccdea91f68607f4480d6dd63e06c969d228f1c3221e3455a25f9fd5a54abcab77e499f847e1be0ef66e76704085c68e0a09d4fc01f7c1b1c9542b30e1d0b38f6b83500257fb5a81cf35aac61ad732547bfc5dea4dbe5019b3cfaed3b291864f8b96b1349b66e225eecd4c365e95dcc1517b16113660683f8b3bbaf1af61ab0e03e121a92297c84747bf61616627bf9b59df1a9803a861a7ae559b123a81a3490a9e0aa3d89d7e476ac136e1544bfe37a990d68c5f89e9c544e920849ceef7d94e3fb99191fc7b89683aed47cbb314a56c5de13d524c9ae9", 0xe2}, {&(0x7f00000009c0)="6fe32d1b6d36ea6765ebfbd537e7c54af738c7e6e1b66aba7ddfaec3675a65e5921afa001137718c72b8f36925d3b27c25d9f7f1b49e6a7ca34eab30638e5496adbd44a7916159e8f8670850bf92bc9196f814bac6010b360cdb5d51fabf06e6f27579f2213df33bc72f17a8c991b60e7a55606b8074fc183e89cb9a8bfb", 0x7e}, {&(0x7f0000000a40)="4a5d278202be05aff96c8ffed13be01a154c443bc12ee4d7e727f207579d6d21a849ac5848d2aa3704ee8f61e051449eed35c1ee84d3d19e41517c5c10f83d3d7a761b345b033c12b5e2b0d43f18394f4d1c67cb8e2c3f4a029753447c44635cf39a464610fb3dc6464d73f8", 0x6c}, {&(0x7f0000000ac0)="7b26706b831d3ee149e35ad85fb9367612e1b3df84a0c72b7b1781fb75", 0x1d}, {&(0x7f0000000b00)="101ada5036eb89bff02110ed73f759f856a8330edff6bd0cc416255f7afe74e6047e07314029e009e20f0be848779ecc8e06de", 0x33}, {&(0x7f0000000b40)="7f7b17a864b68f94fff9154a8ac06068ba0263fee407d589c0cbe96d67c9bfade0425baf907f13142f4b88e74b2c6c94ba9069a939d5e0c0a149858a9198e74e5f8d0e", 0x43}, {&(0x7f0000000bc0)="e399698ea37214c6faabf38227cd2ec1315e70118665d2f8bc1f5b262bb9a535e975cd0daea76ed7b7611dcfab2fc6a058b60b82266fa1c42c71d5d5289a9cd24b91babe5814adcb9731b9ee8ad105fc64a3edecebe1d36bf2624060dbb1e5bd4212c87ac2f2d05c97c1270c7327af8dff3345b1ccdcd27f6f653fe704e1aba2201f1b98dc3aa04e3863ba602f237829a9cbc5af6d91bd245bd4f52c988e9f5857352d3a4da1a66ab76fcc496c4effeaa3641ef982f275e07f80e2729ade8b94", 0xc0}], 0x7, 0x6, 0x3f)
lseek(r0, 0xfffffffffffffff8, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/udplite6\x00')
kcmp(0x0, 0x0, 0x3, r0, r3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000dc0)={0x2, 0x6, 0x1, 'queue1\x00', 0x1000})
ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000e80)={0x1, 0x0, 0x0, 0x5})

13:54:30 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(r0, &(0x7f0000000180)='./file0/../file0\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000d37a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
symlinkat(&(0x7f0000000000)='./file0/../file0\x00', r2, &(0x7f00000000c0)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r2, r1, 0x0, 0xfffffdef)
r5 = syz_open_dev$vcsn(&(0x7f0000000240), 0x1000, 0x402440)
ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f00000002c0))

13:54:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x34000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:54:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:54:30 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

13:54:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:54:30 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32)

[ 2594.509863] loop4: detected capacity change from 0 to 40
[ 2594.516002] loop6: detected capacity change from 0 to 40
[ 2594.520595] loop3: detected capacity change from 0 to 40
[ 2594.527341] loop5: detected capacity change from 0 to 40
[ 2594.538778] FAT-fs (loop5): bogus number of reserved sectors
[ 2594.539364] FAT-fs (loop5): Can't find a valid FAT filesystem
13:54:30 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000006c0))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000740)={{<r2=>0x0, 0x40, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0x9, 0x1f, 0x80, 0x3ff00000, 0x3, 0xf614, 0x5ab9e75}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000800)={{r2, 0x5, 0x6, 0x3, 0x80000001, 0xe66, 0x7f, 0x1, 0x7, 0x3, 0x40000, 0xa101, 0x8, 0xff, 0x5}, 0x10, [0x0, 0x0]})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000880)={0x1, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x1, 'none\x00', 0x1c, 0x2, 0x58}, 0x2c)
pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)="09bd38f60f9377103b377ccdea91f68607f4480d6dd63e06c969d228f1c3221e3455a25f9fd5a54abcab77e499f847e1be0ef66e76704085c68e0a09d4fc01f7c1b1c9542b30e1d0b38f6b83500257fb5a81cf35aac61ad732547bfc5dea4dbe5019b3cfaed3b291864f8b96b1349b66e225eecd4c365e95dcc1517b16113660683f8b3bbaf1af61ab0e03e121a92297c84747bf61616627bf9b59df1a9803a861a7ae559b123a81a3490a9e0aa3d89d7e476ac136e1544bfe37a990d68c5f89e9c544e920849ceef7d94e3fb99191fc7b89683aed47cbb314a56c5de13d524c9ae9", 0xe2}, {&(0x7f00000009c0)="6fe32d1b6d36ea6765ebfbd537e7c54af738c7e6e1b66aba7ddfaec3675a65e5921afa001137718c72b8f36925d3b27c25d9f7f1b49e6a7ca34eab30638e5496adbd44a7916159e8f8670850bf92bc9196f814bac6010b360cdb5d51fabf06e6f27579f2213df33bc72f17a8c991b60e7a55606b8074fc183e89cb9a8bfb", 0x7e}, {&(0x7f0000000a40)="4a5d278202be05aff96c8ffed13be01a154c443bc12ee4d7e727f207579d6d21a849ac5848d2aa3704ee8f61e051449eed35c1ee84d3d19e41517c5c10f83d3d7a761b345b033c12b5e2b0d43f18394f4d1c67cb8e2c3f4a029753447c44635cf39a464610fb3dc6464d73f8", 0x6c}, {&(0x7f0000000ac0)="7b26706b831d3ee149e35ad85fb9367612e1b3df84a0c72b7b1781fb75", 0x1d}, {&(0x7f0000000b00)="101ada5036eb89bff02110ed73f759f856a8330edff6bd0cc416255f7afe74e6047e07314029e009e20f0be848779ecc8e06de", 0x33}, {&(0x7f0000000b40)="7f7b17a864b68f94fff9154a8ac06068ba0263fee407d589c0cbe96d67c9bfade0425baf907f13142f4b88e74b2c6c94ba9069a939d5e0c0a149858a9198e74e5f8d0e", 0x43}, {&(0x7f0000000bc0)="e399698ea37214c6faabf38227cd2ec1315e70118665d2f8bc1f5b262bb9a535e975cd0daea76ed7b7611dcfab2fc6a058b60b82266fa1c42c71d5d5289a9cd24b91babe5814adcb9731b9ee8ad105fc64a3edecebe1d36bf2624060dbb1e5bd4212c87ac2f2d05c97c1270c7327af8dff3345b1ccdcd27f6f653fe704e1aba2201f1b98dc3aa04e3863ba602f237829a9cbc5af6d91bd245bd4f52c988e9f5857352d3a4da1a66ab76fcc496c4effeaa3641ef982f275e07f80e2729ade8b94", 0xc0}], 0x7, 0x6, 0x3f)
lseek(r0, 0xfffffffffffffff8, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/udplite6\x00')
kcmp(0x0, 0x0, 0x3, r0, r3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000dc0)={0x2, 0x6, 0x1, 'queue1\x00', 0x1000})
ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000e80)={0x1, 0x0, 0x1})

13:54:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:54:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:54:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2594.734221] syz-executor.6: attempt to access beyond end of device
[ 2594.734221] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2594.735209] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2594.748717] loop4: detected capacity change from 0 to 40
13:54:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x80000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:54:30 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

13:54:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x48, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x45}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)

[ 2594.785650] loop5: detected capacity change from 0 to 40
[ 2594.796569] loop3: detected capacity change from 0 to 40
[ 2594.800739] FAT-fs (loop5): bogus number of reserved sectors
[ 2594.801242] FAT-fs (loop5): Can't find a valid FAT filesystem
13:54:30 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33)

13:54:30 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000006c0))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000740)={{<r2=>0x0, 0x40, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0x9, 0x1f, 0x80, 0x3ff00000, 0x3, 0xf614, 0x5ab9e75}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000800)={{r2, 0x5, 0x6, 0x3, 0x80000001, 0xe66, 0x7f, 0x1, 0x7, 0x3, 0x40000, 0xa101, 0x8, 0xff, 0x5}, 0x10, [0x0, 0x0]})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000880)={0x1, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x1, 'none\x00', 0x1c, 0x2, 0x58}, 0x2c)
pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)="09bd38f60f9377103b377ccdea91f68607f4480d6dd63e06c969d228f1c3221e3455a25f9fd5a54abcab77e499f847e1be0ef66e76704085c68e0a09d4fc01f7c1b1c9542b30e1d0b38f6b83500257fb5a81cf35aac61ad732547bfc5dea4dbe5019b3cfaed3b291864f8b96b1349b66e225eecd4c365e95dcc1517b16113660683f8b3bbaf1af61ab0e03e121a92297c84747bf61616627bf9b59df1a9803a861a7ae559b123a81a3490a9e0aa3d89d7e476ac136e1544bfe37a990d68c5f89e9c544e920849ceef7d94e3fb99191fc7b89683aed47cbb314a56c5de13d524c9ae9", 0xe2}, {&(0x7f00000009c0)="6fe32d1b6d36ea6765ebfbd537e7c54af738c7e6e1b66aba7ddfaec3675a65e5921afa001137718c72b8f36925d3b27c25d9f7f1b49e6a7ca34eab30638e5496adbd44a7916159e8f8670850bf92bc9196f814bac6010b360cdb5d51fabf06e6f27579f2213df33bc72f17a8c991b60e7a55606b8074fc183e89cb9a8bfb", 0x7e}, {&(0x7f0000000a40)="4a5d278202be05aff96c8ffed13be01a154c443bc12ee4d7e727f207579d6d21a849ac5848d2aa3704ee8f61e051449eed35c1ee84d3d19e41517c5c10f83d3d7a761b345b033c12b5e2b0d43f18394f4d1c67cb8e2c3f4a029753447c44635cf39a464610fb3dc6464d73f8", 0x6c}, {&(0x7f0000000ac0)="7b26706b831d3ee149e35ad85fb9367612e1b3df84a0c72b7b1781fb75", 0x1d}, {&(0x7f0000000b00)="101ada5036eb89bff02110ed73f759f856a8330edff6bd0cc416255f7afe74e6047e07314029e009e20f0be848779ecc8e06de", 0x33}, {&(0x7f0000000b40)="7f7b17a864b68f94fff9154a8ac06068ba0263fee407d589c0cbe96d67c9bfade0425baf907f13142f4b88e74b2c6c94ba9069a939d5e0c0a149858a9198e74e5f8d0e", 0x43}, {&(0x7f0000000bc0)="e399698ea37214c6faabf38227cd2ec1315e70118665d2f8bc1f5b262bb9a535e975cd0daea76ed7b7611dcfab2fc6a058b60b82266fa1c42c71d5d5289a9cd24b91babe5814adcb9731b9ee8ad105fc64a3edecebe1d36bf2624060dbb1e5bd4212c87ac2f2d05c97c1270c7327af8dff3345b1ccdcd27f6f653fe704e1aba2201f1b98dc3aa04e3863ba602f237829a9cbc5af6d91bd245bd4f52c988e9f5857352d3a4da1a66ab76fcc496c4effeaa3641ef982f275e07f80e2729ade8b94", 0xc0}], 0x7, 0x6, 0x3f)
lseek(r0, 0xfffffffffffffff8, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/udplite6\x00')
kcmp(0x0, 0x0, 0x3, r0, r3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000dc0)={0x2, 0x6, 0x1, 'queue1\x00', 0x1000})
ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000e80)={0x1, 0x0, 0x1})

13:54:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:54:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2594.910689] loop6: detected capacity change from 0 to 40
13:54:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2594.977473] loop3: detected capacity change from 0 to 40
13:54:31 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000006c0))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000740)={{<r2=>0x0, 0x40, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0x9, 0x1f, 0x80, 0x3ff00000, 0x3, 0xf614, 0x5ab9e75}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000800)={{r2, 0x5, 0x6, 0x3, 0x80000001, 0xe66, 0x7f, 0x1, 0x7, 0x3, 0x40000, 0xa101, 0x8, 0xff, 0x5}, 0x10, [0x0, 0x0]})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000880)={0x1, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x1, 'none\x00', 0x1c, 0x2, 0x58}, 0x2c)
pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)="09bd38f60f9377103b377ccdea91f68607f4480d6dd63e06c969d228f1c3221e3455a25f9fd5a54abcab77e499f847e1be0ef66e76704085c68e0a09d4fc01f7c1b1c9542b30e1d0b38f6b83500257fb5a81cf35aac61ad732547bfc5dea4dbe5019b3cfaed3b291864f8b96b1349b66e225eecd4c365e95dcc1517b16113660683f8b3bbaf1af61ab0e03e121a92297c84747bf61616627bf9b59df1a9803a861a7ae559b123a81a3490a9e0aa3d89d7e476ac136e1544bfe37a990d68c5f89e9c544e920849ceef7d94e3fb99191fc7b89683aed47cbb314a56c5de13d524c9ae9", 0xe2}, {&(0x7f00000009c0)="6fe32d1b6d36ea6765ebfbd537e7c54af738c7e6e1b66aba7ddfaec3675a65e5921afa001137718c72b8f36925d3b27c25d9f7f1b49e6a7ca34eab30638e5496adbd44a7916159e8f8670850bf92bc9196f814bac6010b360cdb5d51fabf06e6f27579f2213df33bc72f17a8c991b60e7a55606b8074fc183e89cb9a8bfb", 0x7e}, {&(0x7f0000000a40)="4a5d278202be05aff96c8ffed13be01a154c443bc12ee4d7e727f207579d6d21a849ac5848d2aa3704ee8f61e051449eed35c1ee84d3d19e41517c5c10f83d3d7a761b345b033c12b5e2b0d43f18394f4d1c67cb8e2c3f4a029753447c44635cf39a464610fb3dc6464d73f8", 0x6c}, {&(0x7f0000000ac0)="7b26706b831d3ee149e35ad85fb9367612e1b3df84a0c72b7b1781fb75", 0x1d}, {&(0x7f0000000b00)="101ada5036eb89bff02110ed73f759f856a8330edff6bd0cc416255f7afe74e6047e07314029e009e20f0be848779ecc8e06de", 0x33}, {&(0x7f0000000b40)="7f7b17a864b68f94fff9154a8ac06068ba0263fee407d589c0cbe96d67c9bfade0425baf907f13142f4b88e74b2c6c94ba9069a939d5e0c0a149858a9198e74e5f8d0e", 0x43}, {&(0x7f0000000bc0)="e399698ea37214c6faabf38227cd2ec1315e70118665d2f8bc1f5b262bb9a535e975cd0daea76ed7b7611dcfab2fc6a058b60b82266fa1c42c71d5d5289a9cd24b91babe5814adcb9731b9ee8ad105fc64a3edecebe1d36bf2624060dbb1e5bd4212c87ac2f2d05c97c1270c7327af8dff3345b1ccdcd27f6f653fe704e1aba2201f1b98dc3aa04e3863ba602f237829a9cbc5af6d91bd245bd4f52c988e9f5857352d3a4da1a66ab76fcc496c4effeaa3641ef982f275e07f80e2729ade8b94", 0xc0}], 0x7, 0x6, 0x3f)
lseek(r0, 0xfffffffffffffff8, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/udplite6\x00')
kcmp(0x0, 0x0, 0x3, r0, r3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000dc0)={0x2, 0x6, 0x1, 'queue1\x00', 0x1000})
ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000e80)={0x1, 0x0, 0x1})

[ 2594.990984] loop5: detected capacity change from 0 to 40
[ 2594.998418] FAT-fs (loop5): bogus number of reserved sectors
[ 2594.998884] FAT-fs (loop5): Can't find a valid FAT filesystem
13:54:31 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

[ 2595.063734] syz-executor.6: attempt to access beyond end of device
[ 2595.063734] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2595.064639] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:54:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:54:31 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2595.100997] loop5: detected capacity change from 0 to 40
[ 2595.107874] FAT-fs (loop5): bogus number of reserved sectors
[ 2595.108528] FAT-fs (loop5): Can't find a valid FAT filesystem
13:54:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:54:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:54:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2595.212013] loop5: detected capacity change from 0 to 40
[ 2595.236599] FAT-fs (loop5): bogus number of reserved sectors
[ 2595.237071] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2595.284333] loop3: detected capacity change from 0 to 40
13:54:45 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34)

13:54:45 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0xc)

13:54:45 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200, 0x12)
openat2(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x80000, 0x100, 0x14}, 0x18)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(0xffffffffffffffff, r2, 0x0, 0x1000)
sendfile(r1, r0, 0x0, 0xfffffdef)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @broadcast}}}], 0x20}, 0x4)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=<r8=>0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000380)={{r5}, r8, 0x1a, @inherit={0x50, &(0x7f0000001540)=ANY=[@ANYBLOB="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"]}, @subvolid=0x8})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"f01e76f0d3618d07f621d34139d0edf2", r8, 0x0, {0x1, 0xcc}, {0xfffffffffffffffd, 0x1000}, 0x5, [0x60, 0x0, 0x101, 0x3, 0x4, 0x6a3cae4d, 0xffffffff, 0x0, 0x8e5, 0x5, 0x0, 0x8, 0x40a0, 0x2, 0x2, 0x1f]})

13:54:45 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:54:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:54:45 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x80000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:54:45 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:54:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2609.430916] loop3: detected capacity change from 0 to 40
[ 2609.433314] loop6: detected capacity change from 0 to 40
[ 2609.461054] loop5: detected capacity change from 0 to 40
[ 2609.463685] FAT-fs (loop5): bogus number of reserved sectors
[ 2609.464131] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2609.496532] syz-executor.6: attempt to access beyond end of device
[ 2609.496532] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2609.497506] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:54:45 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:54:45 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35)

13:54:45 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0xc)

13:54:45 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2609.631722] loop3: detected capacity change from 0 to 40
13:54:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2609.681760] loop5: detected capacity change from 0 to 40
[ 2609.686602] loop6: detected capacity change from 0 to 40
[ 2609.694342] FAT-fs (loop5): bogus number of reserved sectors
[ 2609.695229] FAT-fs (loop5): Can't find a valid FAT filesystem
13:54:45 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:54:45 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2609.772536] FAT-fs (loop4): bogus number of reserved sectors
[ 2609.772998] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2609.774637] syz-executor.6: attempt to access beyond end of device
[ 2609.774637] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2609.775489] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2609.823471] loop3: detected capacity change from 0 to 40
13:55:03 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0xc)

13:55:03 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:55:03 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:55:03 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0xc)

13:55:03 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x2, 0x7)
syncfs(r3)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:55:03 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36)

13:55:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:55:03 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2627.194929] loop3: detected capacity change from 0 to 40
[ 2627.212090] loop6: detected capacity change from 0 to 40
[ 2627.243868] loop5: detected capacity change from 0 to 40
[ 2627.244900] FAT-fs (loop4): bogus number of reserved sectors
[ 2627.245957] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2627.263371] FAT-fs (loop5): bogus number of reserved sectors
[ 2627.264645] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2627.419721] syz-executor.3: attempt to access beyond end of device
[ 2627.419721] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2627.421504] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2627.466244] syz-executor.6: attempt to access beyond end of device
[ 2627.466244] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2627.468112] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:55:03 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:55:03 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:55:03 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff}, 0xc)

[ 2627.606331] loop5: detected capacity change from 0 to 40
[ 2627.616600] FAT-fs (loop5): bogus number of reserved sectors
[ 2627.617556] FAT-fs (loop5): Can't find a valid FAT filesystem
13:55:03 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:55:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2627.777386] FAT-fs (loop4): bogus number of reserved sectors
[ 2627.778497] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2627.785661] loop3: detected capacity change from 0 to 40
[ 2627.909939] syz-executor.3: attempt to access beyond end of device
[ 2627.909939] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2627.911755] Buffer I/O error on dev loop3, logical block 10, lost async page write
13:55:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37)

13:55:19 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:55:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:55:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:55:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200, 0x12)
openat2(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x80000, 0x100, 0x14}, 0x18)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(0xffffffffffffffff, r2, 0x0, 0x1000)
sendfile(r1, r0, 0x0, 0xfffffdef)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @broadcast}}}], 0x20}, 0x4)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=<r8=>0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000380)={{r5}, r8, 0x1a, @inherit={0x50, &(0x7f0000001540)=ANY=[@ANYBLOB="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"]}, @subvolid=0x8})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"f01e76f0d3618d07f621d34139d0edf2", r8, 0x0, {0x1, 0xcc}, {0xfffffffffffffffd, 0x1000}, 0x5, [0x60, 0x0, 0x101, 0x3, 0x4, 0x6a3cae4d, 0xffffffff, 0x0, 0x8e5, 0x5, 0x0, 0x8, 0x40a0, 0x2, 0x2, 0x1f]})

13:55:19 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff}, 0xc)

13:55:19 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x60001, 0xae)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x604802, 0xc3)
syncfs(r4)
sendfile(r2, r1, 0x0, 0xfffffdef)

13:55:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2643.440952] loop6: detected capacity change from 0 to 40
[ 2643.478071] syz-executor.6: attempt to access beyond end of device
[ 2643.478071] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2643.478976] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2643.483687] loop3: detected capacity change from 0 to 40
[ 2643.526138] loop2: detected capacity change from 0 to 40
[ 2643.537635] loop5: detected capacity change from 0 to 40
[ 2643.551369] FAT-fs (loop4): bogus number of reserved sectors
[ 2643.552427] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2643.565237] FAT-fs (loop5): bogus number of reserved sectors
[ 2643.566336] FAT-fs (loop5): Can't find a valid FAT filesystem
13:55:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38)

[ 2643.637624] loop6: detected capacity change from 0 to 40
[ 2643.673691] syz-executor.3: attempt to access beyond end of device
[ 2643.673691] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2643.675386] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2643.725193] syz-executor.6: attempt to access beyond end of device
[ 2643.725193] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2643.726132] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:55:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:55:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2643.878332] FAT-fs (loop4): bogus number of reserved sectors
[ 2643.879312] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2643.892780] loop3: detected capacity change from 0 to 40
[ 2643.991390] syz-executor.3: attempt to access beyond end of device
[ 2643.991390] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2643.992246] Buffer I/O error on dev loop3, logical block 10, lost async page write
13:55:35 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39)

13:55:35 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:55:35 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:55:35 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:55:35 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2659.745699] loop5: detected capacity change from 0 to 40
13:55:35 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff}, 0xc)

13:55:35 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:55:35 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2659.777374] FAT-fs (loop5): bogus number of reserved sectors
[ 2659.778438] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2659.779865] loop3: detected capacity change from 0 to 40
[ 2659.797360] FAT-fs (loop4): bogus number of reserved sectors
[ 2659.798457] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2659.834692] loop6: detected capacity change from 0 to 40
13:55:36 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:55:36 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2659.942462] syz-executor.3: attempt to access beyond end of device
[ 2659.942462] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2659.943468] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2659.951189] FAULT_INJECTION: forcing a failure.
[ 2659.951189] name failslab, interval 1, probability 0, space 0, times 0
[ 2659.952221] CPU: 1 PID: 12868 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2659.953169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2659.954422] Call Trace:
[ 2659.954823]  <TASK>
[ 2659.955195]  dump_stack_lvl+0x8f/0xb7
[ 2659.955899]  should_fail_ex.cold+0x5/0xa
[ 2659.956586]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2659.957466]  should_failslab+0x9/0x20
[ 2659.958122]  kmem_cache_alloc+0x5a/0x410
[ 2659.958787]  fat_cache_add.part.0+0x5b4/0xb50
[ 2659.959522]  fat_get_cluster+0x922/0xd40
[ 2659.960361]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2659.961210]  fat_get_mapped_cluster+0x216/0x450
[ 2659.962049]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 2659.962981]  fat_bmap+0x1fc/0x460
[ 2659.963585]  fat_get_block+0x33e/0x930
[ 2659.964213]  ? __pfx_fat_get_block+0x10/0x10
[ 2659.964935]  ? lock_is_held_type+0xdb/0x130
[ 2659.965706]  __block_write_begin_int+0x380/0x13d0
[ 2659.966621]  ? __pfx_fat_get_block+0x10/0x10
[ 2659.967378]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2659.968506]  ? PageHeadHuge+0x169/0x1b0
[ 2659.969337]  ? __pfx_fat_get_block+0x10/0x10
[ 2659.970240]  block_write_begin+0xb9/0x450
[ 2659.971036]  cont_write_begin+0x4fe/0x700
[ 2659.971963]  ? lock_is_held_type+0xdb/0x130
[ 2659.972767]  ? __pfx_fat_get_block+0x10/0x10
[ 2659.973573]  ? __pfx_cont_write_begin+0x10/0x10
[ 2659.974434]  ? lock_release+0x3b6/0x750
[ 2659.975168]  ? __mark_inode_dirty+0x5a6/0xe70
[ 2659.976175]  ? mark_held_locks+0x9e/0xe0
[ 2659.976805]  fat_write_begin+0x89/0x180
[ 2659.977555]  ? __pfx_fat_get_block+0x10/0x10
[ 2659.978636]  generic_perform_write+0x25a/0x580
[ 2659.979601]  ? __pfx_generic_perform_write+0x10/0x10
[ 2659.980496]  ? __pfx_fat_update_time+0x10/0x10
[ 2659.981357]  ? __pfx_file_update_time+0x10/0x10
[ 2659.982255]  ? generic_write_checks+0x2c0/0x400
[ 2659.983117]  __generic_file_write_iter+0x308/0x4b0
[ 2659.984157]  ? do_sendfile+0xb1d/0x1280
[ 2659.984916]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 2659.985796]  generic_file_write_iter+0xe7/0x350
[ 2659.986677]  do_iter_readv_writev+0x211/0x3c0
[ 2659.987519]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2659.988453]  ? avc_policy_seqno+0xd/0x70
[ 2659.989204]  ? security_file_permission+0xb5/0xe0
[ 2659.990105]  do_iter_write+0x18b/0x700
[ 2659.990846]  ? lock_is_held_type+0xdb/0x130
[ 2659.991671]  vfs_iter_write+0x74/0xb0
[ 2659.992391]  iter_file_splice_write+0x73e/0xcb0
[ 2659.993280]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2659.994208]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2659.995193]  ? inode_security+0x105/0x140
[ 2659.996015]  ? security_file_permission+0xb5/0xe0
[ 2659.996896]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2659.997855]  direct_splice_actor+0x113/0x180
[ 2659.998700]  splice_direct_to_actor+0x33a/0x8c0
[ 2659.999566]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2660.000496]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2660.001443]  ? security_file_permission+0xb5/0xe0
[ 2660.002303]  do_splice_direct+0x1bc/0x290
[ 2660.002931]  ? __pfx_do_splice_direct+0x10/0x10
[ 2660.003649]  ? lock_is_held_type+0xdb/0x130
[ 2660.004322]  do_sendfile+0xb1d/0x1280
[ 2660.004931]  ? __pfx_do_sendfile+0x10/0x10
[ 2660.005581]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2660.006353]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2660.007181]  __x64_sys_sendfile64+0x248/0x2a0
[ 2660.007859]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2660.008610]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2660.009351]  do_syscall_64+0x3f/0x90
[ 2660.009921]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2660.010663] RIP: 0033:0x7f9e504c4b19
[ 2660.011171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2660.013527] RSP: 002b:00007f9e4da3a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2660.014540] RAX: ffffffffffffffda RBX: 00007f9e505d7f60 RCX: 00007f9e504c4b19
[ 2660.015477] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2660.016420] RBP: 00007f9e4da3a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2660.017352] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2660.018314] R13: 00007ffe30ffd7cf R14: 00007f9e4da3a300 R15: 0000000000022000
[ 2660.019289]  </TASK>
13:55:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:55:36 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000190001000000007a0000000000006093dcb3805b00000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x48801}, 0x20004000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1/file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="e704002000f80100"/23, 0x17}, {0x0, 0x0, 0x2800}], 0x3418, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16, @ANYRES16, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRESOCT=r3, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESHEX])
chdir(&(0x7f0000000140)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r7)
sendfile(r5, r4, 0x0, 0xfffffdef)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r8)
openat(r8, &(0x7f0000000000)='./file1\x00', 0x100, 0x2)

13:55:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:55:36 executing program 1:
[ 2660.163981] syz-executor.6: attempt to access beyond end of device
[ 2660.163981] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2660.165746] Buffer I/O error on dev loop6, logical block 10, lost async page write
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, 0x7, &(0x7f00000025c0)=[{&(0x7f0000000180)="82fee93aa9c836c79eeb7e3607ac33206f5f754c174dbdea9d0e0c160754c7da60c3ab37c71f6118cc4e9125a62ebe8e2522501ca5e49cd6", 0x38, 0x3ff}, {&(0x7f0000000500)="c7927beca728166fca25e62544c731cecfc3940338d3453ba77fce4e1f4dbab6143d2195624dab72b63fc27cf3b70f08d6cf917751be704f21f12bcd7d5a13ca179558b2c189c433a4a1b4853a0ada10f75ff4c121d52cb733a517f38a46bb3434954e2f79f4d58054d150baf734ab19c73493ef805bac11fa81218e8518c13b0b5fa3d2d97454863868abb33f9539b8f2bfe5545d7e562edd664d3d94493e00bcebb0ae7ef46108d081a73916e179b996a17ddc752d3dbb2bd3dd649a2242d7294b8d9d85d5ef02a15d65f7678e2d28774d34510c9dd3cdd146ceb0d548acc73bc17c66c8b357be3c2c8b8e7a3ca80449d2d86a52dc27d69efae6b972900c0af2e3c6210a93d45fdd48cb5cf276fa76290c097f6d18d3a47ede847341556bd3e22d461c5ece5b99503c7863c31faf746d3ff5b1166d3583ed65b70b7a54b6484596f7a3d6edbc99e82026b049fc59444c43f0e7d16f20124f71ac977c3a2b662f3f2cae196ac0ff58a6784f7619413e3a5cff8559e1e259293e1d966a0a1600fce9f913b393ce4cb639616b991b6b6a0a0a00f952bc7b0bbcea16cd66395bdfc27795f6e919f1e012febfd04a2072cc89ba1fc2afd087cc223551e823c6e05edbdc5717f99cfa337f60a7f53809716e4735f4e0946f57c2940f0856f63fc5cc4dbf81b4afb9298b4be2a119aaed64322761153001827272f5f6cd0384c0670fc2d18dadc2df6bdbe9b0e411507333c3bd694357938db51f80092aa5df2bf9f96064b5d1b634b6be23b5e530a662c4ca492f4493d9486c6aa66744cc2b9e7f731fa40615122e398415130ce5c90979d999623bdb40adc9622d2d1514088b1c21d7c82f9710e7dfeb373596f15eae09fb2ac34365815fa6677f26f5989d30cf567b5bf262d205539999ecba114d7a12edd08d614bd124e2f03de206dec6ade6830063bcc18217ef1fac707051d74049533eb639b6cb15d124852af24a170654a762d8e999b78550db9e72f0491dcedfa7926fccd873a6adf5b5a0ee2c0efa457dcdea07cd54e8f6902b40c248eb2ff7b78b3213de3206e806f198203662e9ed211dd7109424628b43f39d2fe4e5fe7afdb03fae03dbff9a97afc6147e34924a5c0f4a07c92d8390577de50191330c53714694b5c26f89028805f165bb795329008cc5950d473107a99631f6be09d3a2c845f80f59f23905d87efccc7e75d5136bbd5f84456f140ca6aaf889088b0201462de0479cafe38b5ec9bba8d846ca81ec2870e0a234ddf8f7a3f78ab8b74da53d95710d08cf088841ff50f7356504c35784c73137398dbdcb10639250db1ff132c7f04b8d31a3293e905908ed8c03a778926b6553208b1529cbfe79696358448f04615d437a99df7a19bb085a5334cfdc918c837f6c41f2642f160b88477a645088cee35a89cff3b27a420d2881460eba2f2029fcf724e7fb05b1696a56d5b576db3d9ac064ab2fad78458552abc55c56da0857a7a0d53319f756bc4d88a6009291032a9b3985462466853bf7d1f8d9a030c749647c99154e6ba60a0fa8dd855162a1f59690baa3fd9f64357b7f70e2649ad3a5d1395d14ee88620d1cf2a998d0d500b718d324338cafd59d693384fc61aae2b2fed166a2ae13afec4f3a0a95cb1b6d04b9eba0489e5fe7c4b55637c0c5e29b861f37098c9e540b36c03edfdd5cbabfa371e502f0eaf926789bdbf740c8fbf6885b74118e6174274a679b95fed13cd5d1e7b2c6f39450c096179933aebfebf6c33048ce337866d4cc55d566229f6af2d854a34e31304636f4d2352dfe64b34490657278eea023ea93e568cb994d7068d7f512c8496c25f8fb8070ab7c184ec5d65146b586cd1f688ea2218b6defc5a6e0cb4e4ecbe8bae682cb47ce24ce7d99d07f842f15716529ce2726c9b064d343a57c6b64a007e68bdd6df996fea328723519f91bfd969ace491b79fa6d93a448d780d1d3f4c4b59de142ae3d05a71bddc9e49b637bb071b067d07687f542f65fa42187d3efa7a0796a65a2640a2290b17b4ceaf349dfd055a6cd89f90006bdf1f578593ce10a9a2089ac96524b9abc3e051286f1a89be3822e039edd3d6da94393383e006f581c1d0090321d8227421c7805c5abbe968bda794e643f704330f8ff9338d10f32c95d09325999bea6679c2a11e2611a4293d886cff12760c555ffd1c2089bb77ffa2bd720e910442cb8d6bbf78027f1146b9f615fd8b43a8079ac0851eb252fa08928c3e2d7f067ff7c48264d0c40b2fafec66fc945ac1eac9d60f4594e78e290b37351506d3583df85fc409da0525fa5b94ff63342af0ddae1c2339ac429c976db1f21f4e1d650479bfcf0775604edec1a72eb6ae8aecf97ab4679026ae288e236ada838c94f28250a3fc420ba9d215a4dab89134328b56dc386470c068ef0e84306d0263d6b5d9ad963c32ed66d2b6a6da83c7b552e23219b7356d837ba7d587080ec62879a3ee7505b41649ee0af8307096c3a9bc8e89d9447d663a50d4a1d7e5090cf86240452dfb717369cc46f633eff1e471137f678650a0e0f13d34c13680b7461c632f05bbcde5a46d497fd2ba7449373b6e8e1800289bd6ebe74bb41d502b6fa92877426763ddc501f1e9e9674557e9948f990d2f2559dca9b3e71f830f398a5f74411d2f02ec666d23d18057b4758ba1b0782f4485df15365e9be849db5cf67dfbfc75b9fb7137a4f4bf6e9df6ac2427f4fc615ee7cc73ec522eca8d39d3d33380c7d4c307bc5fd327f53ed0b04d4ce0179b4fb69b0bc2f855aa508e62a1882a942cbdee0f99f412804248ab68c214920abff02e3b1e39502cb31e1074eeaeab95ad63efe6457f23cb36aef09d75163e97ddc3547f57dc9378d884ffc726f0e9fa6ea784e1093c156eeec1a72251d19c8862ac144d53070737ecf0a84c7abb4995dd2b2b66b1d9401bb6e2f96970f123e03a0999e4f16994744ef1a48a7d5c590380f249d7a8f82197c0a471c4e501a3a02cba51e76d114222e5167f47e88d833069ff76e1c66802bb68004d1b7c28acc570967d1c2f1cf028abd1231536742ca60343bca0354727a57fe2a23fe14a81b1a3f4007a808ff9f7fec8011a34c9933e74e435e14c9d47f781deb6e426683df56b91aad24d51475141007605d55420384593af8a94d5c82e4005e57dd5e5b31b61daca11393646af17b00aad781032070f29bfed4283a99f0b74c54f2b8d39988f182857767c2d4c495a19db1101ab212a2e7750c15376759e8d5fb8685b2365513adff961c9a4f46d63021424b5b8526210424070306de9fe83cb3c04300e3bd7e6d250c44544e7f14dfb082f997ac7debf0f5dfb3b47af6c7f623b5e2708d78d6a46c73de348f63998997ac1ed63e3e54ab5c36ad6ed891928f6612c6990f297e05017c2c795377c9e910451888bcbdb2c5452c09c567ffb66457c5c61d2aace037c5877213e63699d32cd9f9a6309040b67ee3f9281d3d1561d58f3d9492c3b94198fbdf6512f0704ede06e75dc8f129a949748ba8528e1a8b4eb918704a8578a197eafdb24541689e1327443d1bf812bc64b48de3b061da5b6a6c1a0052e686e117c513ee5c86988be99226f1e017d522fd4b74994127b2a1a6717f1194670d0c97313c9b920c61cf0013082ff50233f3a79fd7449f73d08dbc438c6b06842804b5089c06d21081ef8b9dabfd5bb9fb7dd17dfe8007b96e1db601e6e31489b233e572a8eb420246c46892c3811677f124b4003434227c7e0caeb5c6e75d69ff98808da720eca79c165712c660f7e1db34701e102d35c2a660802057578c5c5751155bc550095619fe0c2c8a565539d17db2540a8b90f17db5227df333a9fb355e2d4ff81b576fa509df5d68709b32bb275efe7c0a1b93f54105a091b4b5d159fb6c3a448d3210a04cdeb6fbe3d07ec143a5ec5c7709446b8c9d28d060575a391a656db32d629de1ecffb7064ee7a129e4f5e19a9366797107cd5016064899328347d360eaae512f13fffbb38396eda106b6e48dbe7f936bb9ac5f6f39e512afd4073b0442351b747b653e46acdcf81f27d8de4236f6895dd5e2437145854d3c81f4393fd2459d5b0bcec61c98f6b770273ffbaa0f452bd8414aee45fad72a25f0bbd19a837af9ac9f4efa104b0e7e6e24a0849485c0d4e34fd79b12a91d754e0141b4735fac49a157e37ab703d4784d4c30c8104047d14d3db4ee9d18cf2bde3df190889aef2a7b156241543272fda79295dabdd0ade9fe0b1ba6f7789a1937bca48a78d082e57c06871d294d7267979e2775ffab8ce875f811a4d32590b1b686cb170043aea218986697ce01f09711b7fe5e95d16b78feb77c3c4b9911a1e2c1e0d447ad84d7c84f0eb5aedef771437bf7d27cb278c8dd7dcc176cfe090f8e38f0b397d3ffe8317fe1f19c8a32f8cf1489951eb4a31076dee77f3e989362d937edeccd9fbc8f1546670835515c5b6f3acc69d281faf73e017d4ed8b1ff03c308597b963c1ca6fbd955531d3afc0a1dcc8f93153af74b8769e3db6516cf3782242d3d8a669641c46fed83986e6319f3207e40357a191b665858c95ecc8d87ab33bed9b453428d96b6d07770b390c050933d25c4ab166e3629ca2829b19c729627203cfba9784900561ee206ee59764ea8dbb5b8ae922945fd26de75b6aac9b8adfaecc60901a6e781249cfb295f612f68dad5a390352b583a1559ca77fd26f63e07f67aec401082de14e4ade6cbccc940c05cdf63407919cdf09f6a63b0506cafb53c5fafc21914bb33c8fa3d7cca5233244d2ba1186b74cea7b251f4e56b1234813dc2815185fc7696eece2639bd47cf19877f34192d96e2977d0e7dea8fdeb70d2d5481d3290a3dfc31d16e9ea1097aede73a15cf8760a738c58d034dabdf240794d54b566bc6eda72988410fef5e5b03707481f0f316a7b25ec91ebba09ae75abe137a187427351f75615483fdaeea2e69e9f97e1acfe0a4157147deb6b10c64d8a93fa5c20e8524da73372f0b9637abb4c2bb7e5c98d8f1308c2364a8778f5d4e1465f734802877dee2492ef715e9750a2c0dda4fe39b70c1b5ca553e9f20f8626f93bab041ba7c6a8c3c75a4b98b18c4c727d63f1c9e840c5c480003896dcb382c6148bd80a0eb1aecdccb48ef9325b5e7ec973711266007ee8aee33501d4b2490d9443003da6576b4428cf7231092170f2dfa503c78b3e187dfc81c7f28a46034030be17da498455b06ee2d0ad6898adfcd4ab0a7d755692fdb7d2dd9fa2d84bb3afe01074298d550bffb1cbf68b92648795ccd4aae6de6c21ba4e8264b47d00f3011053a7eafe7af26792ada67512d3f0e725675a583f727615747060866c5a606a079f42434c2506e52fb83419f7a13a08b2c2cf16089f0436eb22fc475361a58fd42cb855c8a9ef03d57c9f6cf92c92d815e8cd9f1d5aa6fd0d92ad4c32a5e6f9b7005b313e075458ba6d1dd45bc0d8601f1da0be3a51c29af0ccbd9c7146e4070d7963a808afbb6be4eac652283e6bf8a8ebaa77e60d097a584f5ea80ecbee9927fb936c25b314eec1e9b2af2eeb5c6049c6b193430edb16882352a070d044f3d7c2e515c60c853ac915c3f8584c3757d25ae6e4402a90c575bddc012e939a2e65f6cdba04fa6aca5d061fe475825d3a572cfaef5eac9352a0d5041a67ca89afe5843e09d3b0cfbd8ecb83fd3c704295ea7e8d1fcbe659ab558e1e894a6ae12377d9472d65565c50361c1f3efa0db768e01212ce9c1c59d1a31208bd575c6690c5219d31ae9cbff32cd0e32", 0x1000, 0x7}, {&(0x7f00000002c0)="7ee425a95a90d83f23b4e20de1a2a994ac4e53292e6d7fc4593dad23dd8a6b51aac8852853fc3cb236b6effcb3480f76fee656dd4c344544778d89cfec9c09af886b0dae605f35de09b437e9def30ab7318561aaff8fbb6d6af5adfa9938751b29f87726868c8c3e938d628170764657e783c16d6355210d4eeece34da8f5a1ab25db9a8c95736fe2778b2e50c33fdc59a8830df745447ef0375f9d6d1daf885cce38eda94dff6edac23d8316a03a84d3524a92c552d4e1ee359b5aaa2ea3bd1f6c2251ad51757145da007ca0f0adb4c801758c554c8c02f6b727473f8c3df55eadb0530e3f3dc5bef", 0xe9, 0x21f8a66f}, {&(0x7f00000003c0)="c0bada9adab11eef2236570086b9dc0470e8581956024419c91187929966944c23846a3f9150f3f08038174e17a375b5817673872b1ee3b3c3567e8f856c19f37a4f7f7d52b1ca9087df7500d787d7994bff640ab9aea8e2cd2f688f0b120afeecb8282cad9c7d646b3d80e4a80730d07ad9b9903194531c950a3d282e0a6ebd", 0x80, 0x1}, {&(0x7f0000001500)="e8826150513a8da0ea1c7021fad5635d0ea5b225949b3d596f6617039b20ab5e71709aeda444fa58c885f849316fef34e36850942f482814ddc7b37a20e09bd99e36076ec18165125a95d8627825f05d05e81f198c2e568b78c766749799e1637d4734b9499083c0641cafa5804155ab1759572fbaf53a81b2d6b354dba3479d7d804b464439a5cc6fabce0b1b40565ab9ed7b79389ec1c6d8dd5c", 0x9b, 0x1}, {&(0x7f00000015c0)="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", 0x1000, 0x1}, {&(0x7f0000000440)="afae820872bf5f4eb7f9f86e5083c4ea171fd6f007059c700a86e7726e25947352fca90bbd5f54b5c66283a95e77ecff0f43e5ccfdfc231c9968b8a8576bfaf68e6c901feb93e3aed4436fc57382d5056aada79db5e009b458f69868f059b5fa3419d9152f", 0x65, 0x400}], 0x1, &(0x7f0000000240)={[{@nr_blocks={'nr_blocks', 0x3d, [0x36, 0xe0, 0x33, 0x74]}}], [{@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}]})
sync_file_range(r0, 0x10000, 0x1, 0x4)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r2, r1, 0x0, 0xfffffdef)

13:55:36 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2660.230928] loop5: detected capacity change from 0 to 40
[ 2660.248509] FAT-fs (loop5): invalid media value (0x00)
[ 2660.249572] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2660.310635] loop4: detected capacity change from 0 to 40
13:55:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 40)

[ 2660.346933] FAT-fs (loop4): bogus number of reserved sectors
[ 2660.347719] FAT-fs (loop4): Can't find a valid FAT filesystem
13:55:36 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2660.409046] loop6: detected capacity change from 0 to 40
13:55:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2660.495479] loop3: detected capacity change from 0 to 40
13:55:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2660.574065] syz-executor.6: attempt to access beyond end of device
[ 2660.574065] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2660.575596] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:55:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2660.710893] loop5: detected capacity change from 0 to 40
[ 2660.729638] loop2: detected capacity change from 0 to 40
[ 2660.730118] syz-executor.3: attempt to access beyond end of device
[ 2660.730118] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2660.734907] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2660.778367] FAT-fs (loop5): invalid media value (0x00)
[ 2660.779117] FAT-fs (loop5): Can't find a valid FAT filesystem
13:55:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 41)

[ 2660.852629] loop4: detected capacity change from 0 to 40
[ 2660.885089] syz-executor.2: attempt to access beyond end of device
[ 2660.885089] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2660.886773] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2660.895511] FAT-fs (loop4): bogus number of reserved sectors
[ 2660.896345] FAT-fs (loop4): Can't find a valid FAT filesystem
13:55:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(0xffffffffffffffff)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:55:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:55:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2661.088867] loop6: detected capacity change from 0 to 40
13:55:37 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xa000000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:55:37 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2661.148925] loop3: detected capacity change from 0 to 40
[ 2661.227202] loop4: detected capacity change from 0 to 40
[ 2661.267782] FAT-fs (loop4): bogus number of reserved sectors
[ 2661.268690] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2661.272527] loop5: detected capacity change from 0 to 40
[ 2661.288221] syz-executor.6: attempt to access beyond end of device
[ 2661.288221] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2661.289925] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2661.292007] FAT-fs (loop5): invalid media value (0x00)
[ 2661.292674] syz-executor.3: attempt to access beyond end of device
[ 2661.292674] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2661.292718] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2661.295653] FAT-fs (loop5): Can't find a valid FAT filesystem
13:55:37 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:55:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 42)

[ 2661.487968] loop2: detected capacity change from 0 to 40
[ 2661.533027] loop6: detected capacity change from 0 to 40
[ 2661.579566] syz-executor.6: attempt to access beyond end of device
[ 2661.579566] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2661.581134] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:55:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 43)

13:55:53 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
signalfd4(r4, &(0x7f0000000180)={[0x1]}, 0x8, 0x180000)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r5)
sendfile(r2, r1, 0x0, 0xfffffdef)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r6=>r0, {0xee00, 0xee01}}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x10000, 0x40}}, './file1\x00'})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r7)
ioctl$LOOP_SET_FD(r7, 0x4c00, r0)

13:55:53 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000006c0))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000740)={{<r2=>0x0, 0x40, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0x9, 0x1f, 0x80, 0x3ff00000, 0x3, 0xf614, 0x5ab9e75}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000800)={{r2, 0x5, 0x6, 0x3, 0x80000001, 0xe66, 0x7f, 0x1, 0x7, 0x3, 0x40000, 0xa101, 0x8, 0xff, 0x5}, 0x10, [0x0, 0x0]})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000880)={0x1, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x1, 'none\x00', 0x1c, 0x2, 0x58}, 0x2c)
pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)="09bd38f60f9377103b377ccdea91f68607f4480d6dd63e06c969d228f1c3221e3455a25f9fd5a54abcab77e499f847e1be0ef66e76704085c68e0a09d4fc01f7c1b1c9542b30e1d0b38f6b83500257fb5a81cf35aac61ad732547bfc5dea4dbe5019b3cfaed3b291864f8b96b1349b66e225eecd4c365e95dcc1517b16113660683f8b3bbaf1af61ab0e03e121a92297c84747bf61616627bf9b59df1a9803a861a7ae559b123a81a3490a9e0aa3d89d7e476ac136e1544bfe37a990d68c5f89e9c544e920849ceef7d94e3fb99191fc7b89683aed47cbb314a56c5de13d524c9ae9", 0xe2}, {&(0x7f00000009c0)="6fe32d1b6d36ea6765ebfbd537e7c54af738c7e6e1b66aba7ddfaec3675a65e5921afa001137718c72b8f36925d3b27c25d9f7f1b49e6a7ca34eab30638e5496adbd44a7916159e8f8670850bf92bc9196f814bac6010b360cdb5d51fabf06e6f27579f2213df33bc72f17a8c991b60e7a55606b8074fc183e89cb9a8bfb", 0x7e}, {&(0x7f0000000a40)="4a5d278202be05aff96c8ffed13be01a154c443bc12ee4d7e727f207579d6d21a849ac5848d2aa3704ee8f61e051449eed35c1ee84d3d19e41517c5c10f83d3d7a761b345b033c12b5e2b0d43f18394f4d1c67cb8e2c3f4a029753447c44635cf39a464610fb3dc6464d73f8", 0x6c}, {&(0x7f0000000ac0)="7b26706b831d3ee149e35ad85fb9367612e1b3df84a0c72b7b1781fb75", 0x1d}, {&(0x7f0000000b00)="101ada5036eb89bff02110ed73f759f856a8330edff6bd0cc416255f7afe74e6047e07314029e009e20f0be848779ecc8e06de", 0x33}, {&(0x7f0000000b40)="7f7b17a864b68f94fff9154a8ac06068ba0263fee407d589c0cbe96d67c9bfade0425baf907f13142f4b88e74b2c6c94ba9069a939d5e0c0a149858a9198e74e5f8d0e", 0x43}, {&(0x7f0000000bc0)="e399698ea37214c6faabf38227cd2ec1315e70118665d2f8bc1f5b262bb9a535e975cd0daea76ed7b7611dcfab2fc6a058b60b82266fa1c42c71d5d5289a9cd24b91babe5814adcb9731b9ee8ad105fc64a3edecebe1d36bf2624060dbb1e5bd4212c87ac2f2d05c97c1270c7327af8dff3345b1ccdcd27f6f653fe704e1aba2201f1b98dc3aa04e3863ba602f237829a9cbc5af6d91bd245bd4f52c988e9f5857352d3a4da1a66ab76fcc496c4effeaa3641ef982f275e07f80e2729ade8b94", 0xc0}], 0x7, 0x6, 0x3f)
lseek(r0, 0xfffffffffffffff8, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/udplite6\x00')
kcmp(0x0, 0x0, 0x3, r0, r3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000dc0)={0x2, 0x0, 0x1, 'queue1\x00', 0x1000})
ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000e80)={0x1, 0x0, 0x1, 0x5})

13:55:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:55:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(0xffffffffffffffff)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:55:53 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:55:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2677.726016] loop3: detected capacity change from 0 to 40
13:55:53 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x14000000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2677.734216] loop4: detected capacity change from 0 to 40
[ 2677.734959] loop5: detected capacity change from 0 to 40
[ 2677.737701] loop6: detected capacity change from 0 to 40
[ 2677.737811] FAT-fs (loop4): bogus number of reserved sectors
[ 2677.738838] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2677.754598] FAT-fs (loop5): invalid media value (0x00)
[ 2677.755417] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2677.840531] syz-executor.3: attempt to access beyond end of device
[ 2677.840531] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2677.842397] Buffer I/O error on dev loop3, logical block 10, lost async page write
13:55:54 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2677.968978] FAULT_INJECTION: forcing a failure.
[ 2677.968978] name failslab, interval 1, probability 0, space 0, times 0
[ 2677.970470] CPU: 0 PID: 12930 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2677.971036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2677.971594] Call Trace:
[ 2677.971776]  <TASK>
[ 2677.971942]  dump_stack_lvl+0x8f/0xb7
[ 2677.972230]  should_fail_ex.cold+0x5/0xa
[ 2677.972529]  ? ext4_init_io_end+0x27/0x180
[ 2677.972835]  should_failslab+0x9/0x20
[ 2677.973117]  kmem_cache_alloc+0x5a/0x410
[ 2677.973420]  ext4_init_io_end+0x27/0x180
[ 2677.973714]  ext4_writepages+0xc84/0x36c0
[ 2677.974033]  ? __stack_depot_save+0x3e/0x4e0
[ 2677.974381]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 2677.974717]  ? mark_lock.part.0+0xef/0x2f70
[ 2677.975027]  ? __pfx_ext4_writepages+0x10/0x10
[ 2677.975355]  ? ext4_file_write_iter+0x3ff/0x1930
[ 2677.975699]  ? do_iter_readv_writev+0x211/0x3c0
[ 2677.976045]  ? entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2677.976434]  ? __lock_acquire+0xbad/0x5e70
[ 2677.976772]  ? perf_trace_lock+0xf0/0x560
[ 2677.977088]  ? perf_trace_lock+0xf0/0x560
[ 2677.977408]  ? __lock_acquire+0xbad/0x5e70
[ 2677.977737]  ? __pfx_ext4_writepages+0x10/0x10
[ 2677.978063]  do_writepages+0x1b4/0x6a0
[ 2677.978368]  ? __pfx_do_writepages+0x10/0x10
[ 2677.978701]  ? lock_release+0x3b6/0x750
[ 2677.979006]  ? wbc_attach_and_unlock_inode+0x44d/0x8d0
[ 2677.979409]  ? __pfx_lock_release+0x10/0x10
[ 2677.979732]  ? __pfx_lock_release+0x10/0x10
[ 2677.980064]  ? __pfx_lock_acquire+0x10/0x10
[ 2677.980406]  ? do_raw_spin_unlock+0x53/0x220
[ 2677.980749]  ? _raw_spin_unlock+0x28/0x50
[ 2677.981071]  ? wbc_attach_and_unlock_inode+0x4a3/0x8d0
[ 2677.981476]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 2677.981830]  __filemap_fdatawrite_range+0xba/0x100
[ 2677.982203]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 2677.982673]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2677.983154]  file_write_and_wait_range+0xd2/0x140
[ 2677.983526]  ext4_sync_file+0x221/0xfa0
[ 2677.983832]  ? __pfx_ext4_sync_file+0x10/0x10
[ 2677.984172]  vfs_fsync_range+0x141/0x230
[ 2677.984485]  ext4_buffered_write_iter+0x37d/0x460
[ 2677.984854]  ? stack_trace_save+0x90/0xd0
[ 2677.985173]  ext4_file_write_iter+0x3ff/0x1930
[ 2677.985529]  ? iter_file_splice_write+0x169/0xcb0
[ 2677.985892]  ? kasan_save_stack+0x35/0x50
[ 2677.986199]  ? kasan_save_stack+0x22/0x50
[ 2677.986552]  ? kasan_set_track+0x25/0x30
[ 2677.986861]  ? __kasan_kmalloc+0x82/0x90
[ 2677.987173]  ? __kmalloc+0x56/0xc0
[ 2677.987447]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2677.987831]  ? do_splice_direct+0x1bc/0x290
[ 2677.988152]  ? do_sendfile+0xb1d/0x1280
[ 2677.988459]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 2677.988814]  ? lock_is_held_type+0xdb/0x130
[ 2677.989152]  do_iter_readv_writev+0x211/0x3c0
[ 2677.989487]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2677.989864]  ? avc_policy_seqno+0xd/0x70
[ 2677.990180]  ? security_file_permission+0xb5/0xe0
[ 2677.990565]  do_iter_write+0x18b/0x700
[ 2677.990869]  ? lock_is_held_type+0xdb/0x130
[ 2677.991209]  vfs_iter_write+0x74/0xb0
[ 2677.991511]  iter_file_splice_write+0x73e/0xcb0
[ 2677.991877]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2677.992266]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2677.992678]  ? security_file_permission+0xb5/0xe0
[ 2677.993055]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2677.993446]  direct_splice_actor+0x113/0x180
[ 2677.993781]  splice_direct_to_actor+0x33a/0x8c0
[ 2677.994138]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2677.994512]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2677.994897]  ? security_file_permission+0xb5/0xe0
[ 2677.995276]  do_splice_direct+0x1bc/0x290
[ 2677.995591]  ? __pfx_do_splice_direct+0x10/0x10
[ 2677.995957]  ? lock_is_held_type+0xdb/0x130
[ 2677.996302]  do_sendfile+0xb1d/0x1280
[ 2677.996608]  ? __pfx_do_sendfile+0x10/0x10
[ 2677.996940]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2677.997323]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2677.997738]  __x64_sys_sendfile64+0x248/0x2a0
[ 2677.998064]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2677.998448]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2677.998826]  do_syscall_64+0x3f/0x90
[ 2677.999107]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2677.999490] RIP: 0033:0x7f9e504c4b19
[ 2677.999772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2678.001057] RSP: 002b:00007f9e4da3a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2678.001617] RAX: ffffffffffffffda RBX: 00007f9e505d7f60 RCX: 00007f9e504c4b19
[ 2678.002139] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006
[ 2678.002658] RBP: 00007f9e4da3a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2678.003167] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2678.003681] R13: 00007ffe30ffd7cf R14: 00007f9e4da3a300 R15: 0000000000022000
[ 2678.004213]  </TASK>
13:55:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:55:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x1f000000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2678.121735] loop5: detected capacity change from 0 to 40
13:55:54 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(0xffffffffffffffff)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:55:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2678.136799] FAT-fs (loop5): invalid media value (0x00)
[ 2678.137765] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2678.221602] loop3: detected capacity change from 0 to 40
[ 2678.225273] loop4: detected capacity change from 0 to 40
[ 2678.256962] FAT-fs (loop4): bogus number of reserved sectors
[ 2678.257738] FAT-fs (loop4): Can't find a valid FAT filesystem
13:55:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2678.360377] syz-executor.3: attempt to access beyond end of device
[ 2678.360377] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2678.361314] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2678.413793] loop5: detected capacity change from 0 to 40
[ 2678.420683] FAT-fs (loop5): invalid media value (0x00)
[ 2678.421272] FAT-fs (loop5): Can't find a valid FAT filesystem
13:55:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:55:54 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 2678.599271] loop4: detected capacity change from 0 to 40
[ 2678.609435] FAT-fs (loop4): bogus number of reserved sectors
[ 2678.609903] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2678.629124] loop3: detected capacity change from 0 to 40
13:55:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2678.813803] loop6: detected capacity change from 0 to 40
[ 2678.848011] syz-executor.6: attempt to access beyond end of device
[ 2678.848011] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2678.849371] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:56:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:56:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

13:56:10 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x4e020000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:56:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:56:10 executing program 6:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r2, r1, 0x0, 0xfffffdef)

13:56:10 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:56:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000001fc0)=[{&(0x7f00000002c0)="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", 0x13a}, {0x0, 0x0, 0x2800}, {&(0x7f0000001f00)="74acef5d1a979b88a6f3806c10229e02e8e887b77827264fd5b987a3ce907cb88407a960ad2212201dad260d2bb749af175f089fbcebc47afd37a37f4e83a1b477e722cfa5e686d4db6347313427d04067d25f83db6b79675d085e334db7db6ff901ff72c162f48b05e5df1c09f01abea16c302ae372f9119cef9ccc71843012760f5b924fa00e7aa74e7c624bdf", 0x8e, 0x7}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
recvmmsg(0xffffffffffffffff, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002040)=""/159, 0x9f}], 0x1, &(0x7f0000000500)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000001500)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001580)=""/212, 0xd4}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000240)=""/31, 0x1f}], 0x3, &(0x7f00000016c0)=""/211, 0xd3}}, {{&(0x7f00000017c0)=@phonet, 0x80, &(0x7f0000001880)=[{&(0x7f0000001840)=""/52, 0x34}], 0x1}, 0x7f}, {{&(0x7f00000018c0)=@nfc_llcp, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/12, 0xc}, {&(0x7f0000001980)=""/156, 0x9c}, {&(0x7f0000001a40)=""/126, 0x7e}, {&(0x7f0000001ac0)=""/224, 0xe0}, {&(0x7f0000001bc0)=""/163, 0xa3}], 0x5, &(0x7f0000001d00)=""/13, 0xd}, 0x1}], 0x4, 0x122, &(0x7f0000001e40))
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8004601190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
syncfs(r3)
ioctl$CDROMPLAYTRKIND(r1, 0x5304, &(0x7f0000001e80)={0x8, 0x7, 0x9, 0x6})
ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000001ec0))
sendfile(r1, r0, 0x0, 0xfffffdef)

13:56:10 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2694.490112] loop5: detected capacity change from 0 to 40
[ 2694.499095] FAT-fs (loop5): bogus number of FAT sectors
[ 2694.499856] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2694.533124] loop6: detected capacity change from 0 to 40
[ 2694.538242] loop4: detected capacity change from 0 to 40
[ 2694.553166] FAT-fs (loop4): bogus number of reserved sectors
[ 2694.553976] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2694.571203] loop3: detected capacity change from 0 to 40
[ 2694.757795] syz-executor.6: attempt to access beyond end of device
[ 2694.757795] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2694.759511] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:56:25 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:56:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:56:25 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x301043, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:56:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:56:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

13:56:25 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:56:25 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x3, 0x3, 0x4, 0x8, 0x0, 0xfffffffffffff000, 0x20, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x1, 0x800}, 0x43, 0x96, 0x3ff, 0x6, 0x9, 0x2, 0x3, 0x0, 0x40, 0x0, 0x97a}, 0xffffffffffffffff, 0xb, r4, 0xc)

13:56:25 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2709.419526] loop4: detected capacity change from 0 to 40
[ 2709.425966] loop3: detected capacity change from 0 to 40
[ 2709.433580] FAT-fs (loop4): bogus number of reserved sectors
[ 2709.434057] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2709.472650] loop6: detected capacity change from 0 to 40
[ 2709.484201] loop5: detected capacity change from 0 to 40
[ 2709.505453] FAT-fs (loop5): bogus number of FAT sectors
[ 2709.506225] FAT-fs (loop5): Can't find a valid FAT filesystem
13:56:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:56:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r1)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 2709.620042] loop3: detected capacity change from 0 to 40
13:56:25 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syz_io_uring_setup(0x3e66, &(0x7f00000007c0)={0x0, 0x1282, 0x1, 0x0, 0xcb, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000740), &(0x7f0000000840)=<r4=>0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000000880)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x3)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @broadcast}}}], 0x20}, 0x0)
getresuid(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000240)=<r8=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=@acquire={0x1d8, 0x17, 0x400, 0x70bd2d, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x4d4, 0x2b}, @in6=@mcast2, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, 0x4e20, 0xa61, 0x4e24, 0x2, 0xa, 0x40, 0x20, 0x3a, r7, r8}, {{@in6=@mcast2, @in6=@loopback, 0x4e25, 0xff, 0x4e21, 0x9, 0xa, 0xa0, 0x80, 0x8, 0x0, r9}, {0x1ff, 0x7, 0xfffffffffffffff8, 0x9, 0x4, 0x7, 0x20000000001, 0x1}, {0x3, 0x1, 0x7}, 0x8000, 0x6e6bb2, 0x0, 0x1, 0x2, 0x3}, 0x1, 0x0, 0x1f, 0x70bd2a}, [@sec_ctx={0xb0, 0x8, {0xac, 0x8, 0x1, 0x7f, 0xa4, "c796a560db77c7937f3e365f643c7cf998a6b80fc915d70a16b21ed4f0d6cdd021a7b96b20400eef24f4bb31ccffb3708ce09955091fcad4a4709b99245cebaa2f73db20e6d41a001db99b0ea008dfa377a8b8dbb508e8a6e2ceeb006be571d449fbdabe5c7b9e231a61b174f8ff50e189ca7a308564f81c0f8820fa56821bb4c41f0a525e4e70da8de241eb23b06d74ddecb2a96f55b8f16dbb88aa7617281f50809593"}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4051}, 0x40080c5)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000480)={0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}]}, 0x28)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:56:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101242, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2709.656727] loop4: detected capacity change from 0 to 40
[ 2709.694162] FAT-fs (loop4): bogus number of reserved sectors
[ 2709.695358] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2709.756009] syz-executor.6: attempt to access beyond end of device
13:56:25 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2709.756009] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2709.758242] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:56:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r1)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 2709.896894] loop5: detected capacity change from 0 to 40
[ 2709.904649] FAT-fs (loop5): bogus number of FAT sectors
[ 2709.905064] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2709.913455] loop2: detected capacity change from 0 to 40
13:56:26 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xc00e0000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:56:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x3, 0x7, &(0x7f0000002500)=[{&(0x7f00000002c0)="ecd5eac71ced1920ec28f956e0b14aa3e5efa5782fe90dc4ad893a5cc86f82d6c3d209364b6ee3d0c1c2659a2b659e2ef2ea3bfa5b2cd8b5a2b772e460d7f3a7d410c276c1ea7d77abf71fd8cc8ad6e889e441bf7f1630a63db8a18ab4700c00fd4900a09344056d145a19f81b347ef2a9c0937000dd336d095d4a562610be3cfd0dcd47b0bf7dd46f9a4c69e6", 0x8d, 0x228}, {&(0x7f0000000000)="5acf38e5e796d876ac2e28a964d78d39627c367f8d8abaf96d07e30c3ae03e98b063752b4eb8eddc1f7f3f34a49bfed31883a7bf0305428d2a1cfb0b70", 0x3d, 0x8}, {&(0x7f0000000500)="f9a605ff4dd64e0efd4f9d5688eb6ec87ff1687f8ea5509ce52f9972868f2911b6992a5a168e1b70eabdd204b32d498dc5c55469ef22ca0fdc5dbcba4f37abbed930627c23fa93a9b19557169148bd67faa4ce903a84cd5ab4a008c7d369e0f2bf1c8062f62f25faf07875c065adf5076993cd0e5beac0b096c581420094f65aeffa8c5650420fe199c92631d1045c341ac84dac97b5ef17e3b7a1cc548e9c6710227f23bf0734883637cb451f5ecea0b5a5e1036f0936f6cb635e5640a064e46f5be9c8e187d526875a1208a4e958da42885fde5384d264fc2273e56e41782be41bfeb69b4c969d49d31f53deb42909974d76232d041f932a4992fecde63b848cc09c69a3e6162b372b0af0fd5264da2463a96da85c9f6ebe7be2c9e5128f9463e2226431a0aed1b407db6130c73dca08be0ba6f845ddae04d5e3e9dc997f248ea61ec8b709ef07b9b809f7d544826f19515357318111a01fe4d9b66f980393c22ad25aae97aad08c8d6253e9b84782fd13e332955b3fd94c76ef1784719038f03aa75bfb30d487cc83dfa22e298d4d3aa0452f3c40e7871182d7eade5b3fb8fd894b237069be2562529a718e16f3379276c0ae16aa422fe3630f81e7d7d1b3008d9989d87fccacb8b5e1d50238bf3db1f932d251c5c994a59d8bb8455c8be38fb3955fdb9c8473f84128e0f9c95a7147199af15f5bdf079e26078d5c3cfe8030a80bb3203ad26643eac6676e6733a56beb60216101c234734d6865c036374c71fdd9559bd10603464bb444451b921c1f1edc906b14ace8b1f36c8bc5a5f38c82f69a2b26387a814902a8fc6c84588229d03349e5b3145f22c90bbc953ad97b161e50a12e80900eefbd3a61a1dd6082842aaa61fffe3490ff2600e9e313cafd1c286efac0b1cb29971f7ba244ceff56fe45a3967dc640b0e5893d2ed9dae8677d9d1d6829d0ea991d699968339cc2395dcc1985a73dc373c66b196edb6f09b25313d9b7dd3ca433a85824752edddf3b47ce9cf473982f62723af7e26af992ae373d50821561a6625eccce5dbda291a5abdc602c15cab3672a990d7c6e96306b93c63c59f894e4163e696b27ec2bdcb42512ab7bbd57319dcaa2410708d34ba20054b341a937274a8f85550c4e181079d4d1db2dda6e350325b9312385be4776381dd477dd02b1f5bcd1464b3fefaf8ad9f91ac83045cca5cbdc0176e2a809e442c63ad730fbde4b8a2db9080efa15fedfbf8bf9fdcdee4e8ad28620733072c465a78fdb01adcfe898db8730b121ddd3bb28ce66409d5fcfff7b08583bc4f38dfc1c0d5b9f6ccdfa69ef8112735b4a02b9d1f44fea3b700a7df61f0800362f85643026c71d520e500029bf032622f106c637456f131d15f1a99870a8e7bf15cf75ee299725471ffce551dc260bf746cc4f7c6d8dc3fce9b8e535b7adb8fc5a8f2ef7ffd096d3f016b9c50b9b9362cdc3e2547453033bc4c7794eeb53febddedd41bf9b83fa8903e953ab78433fc810fc9b3227050673cbcde71a3e9b69d9fba02d6931b6c95ee12e444e9a2aece02f8e90d20e34d3bd0a501cc35ea3873e6fdf32e5ac3a0303ac108f92446fdd154d74d0a2e89cd8f3305198f292793f464686fcb81527ca04d0359a3f17cc3b064c91e24137fbefad9681db04674dd6a4ad60c95654f49fba1fa9d2a87775dc94461c5d3065f20eb3ccf0c374ab164d4cd76120097322cf7a4a60c7b857c0e561b9b3b00e9125c651e20d760013a216f0200e2f34310621df47ad11243bb577e61614151985a75e66f80585237fb600f45fc36a6de5965dad9606217e9eea497a36b85b487da70e5a46b781d334e60a9c1521d6bb0b528fa86e6d209dc31a30def925abddb40e1b2aec75244b8de23cd277473aecb53c67add52a99b677fc3dfb7ea77c8d9646817dc60cc751ca08c11c4cc354cc2b07c9b7d349ba88ea4ace63f295f1de60699234a176b2d1994c4229b74ec883e491d3ff3dbfd7eeffe0924fc01b57d7e6ef950007f6eecb629d8a827d85aeb7b914fea1a352522250a73d852f8659e31f853a6b5fea85d41e591de67888e2980796eeedff561d7d7cba11624bb620ac0370f0bec9d4334ed9cbf058251e5a40e993d3963a7ae9fe31c4c4f4c3dc36fd9b72a380af4628197d77796a741230227524142c6061f40636f2124af618955fbccfd2ceb814fd41879f2179009ae882109af91caa47e140d65a08fca3db591b2b1f6fa49918059146aad946ae6e14d575d9563b27d2c7017199d9839fc6c4a77979385165bb60516330f8988aad9e7c5e2c19729380d2d2ed5e6a8ee02e18c9202e438d7f4d97a5dbe908ad4033548c615bf3951ef4222b14d91452255380ef89ea049fcd24da168968b98ef0ed84888eaf4e772e4b4488f64e7eba110d57bdeb8cd109f1c016b0c5d7e5ac65616b061e2288e67bef7cc943fc6e6a5a482bcb34e0891e3f9849b0f7bc0158e9476f36d3ce75c1f363134a1a14d13de90760923bd8406918167f504b086871558d338af23a2cc32982ee9f8f590bc087d243961584d8e01d24d5a01d843feaab172208818c4a1c2e7fcc54016d00db2cb0a97aa8d6ecdc2a2048f4e3ed4b290ad2108b224cfeb752ab3d4047be91ef5ac388997cd33f4e41adf547b7728d39470934aa3dd727cf578739fe3cadab2e51e6f51c246d86602a145306b9f8fb80b0b6ea241cafd6b2fba0eb5bbf0bc801d2ec11089b7d85df0b4240af0d51ab8b9a5f40362bf197dac967db5212c76438366d7b1ace0f2d1483f69c0f91b76bca7e66da82c5b544a552ab4801fb943bd7425640cb70b0572a5d2ec01616862526b823cc0f5c07dfc6dd16864890890bc173411f552669cf7cb7e22e75e8a5974fc298be19a73a79e4bc6a39cff8898d97f7af71520f2da68baeaf560cf8ac3f84486a6a4b2c0371d7373ba1525a2fe78ba0ccc32579724a14f062cea620f2c525f987f0930d7b6d2756141e7ab9a7e20f0541d0abfdc5cdadfd7ac4bab8c02805028be6fdbd9100a0af35b42c39cabd8351dc68f07a10a5dfe354c8c19e5d26abc9396905b61e8a30a70b552961c2f59f5b09d216438c5470cb0032320699527670e6c186e2f1b9adb2d343b149e7d44a525f07bab06442fd9529b83e820b5fefe5d5e9d947e882c09455c98a6efc464bf9962ffab10843c3f2ea5023eb03417c0b97e3a2266346751f7f59d5ef2bd94b79391256fa61a7adebb72d10b14a18fcaff8caad0575e0fdc7fc6b25c46660a85c1a55aaa579436aa4d21bffa7de35f3f962b590749813217b2b79990866179acd74359e2bb622b06f80eb980e5c87d0d2100397f4ee333e7704ace8baf230af2d591a2c6b4ee5853ed5656a822218379c39cbc3e52989f62fec195314c380afd84521fb8196711dc485d5d2b079b4699b73e4ea7dc42cd45fb0a9c92e9e39535b72b411dca3fab450f0003917acebff726b94f4624143a61b084179f09888ac39f8803e5a223ffa5aa71afb24d6201b5386094491d7339984cf28f4ec2d3ab0d6dbf10e46cd49acd5e85c82826a7cf602e3ba4ca988ba3e64dd46102fb30514691ca07f1fac4352b85f2f66269ab773abb9703e47923c7014c6093fd715834e692a1299bc328963f4640cfcdc2f31de0e369c1b60e91e9616ecd41693e3b6784a392e2541cbc271503c4190202e8dd0bd998392a60b7cffc7f6c97b221a1dfa12f2662a00c36aeb20a67a958e5241f347ec73c267e532a1f077a55df310b910e60e8bdbf08bb537a685f911005447c91a42914efff26ea95866d83001980554365e995e5cc7d91d362d56c9bcf3c432db4c06c28d49ca50c86f6ab9e0f9bcf140421791ba2fee4120e0c3f93a199e8b371ff53ecf5ac3ef300ed454c5e15a71f8bc77835437b717ee4c90c65212d803ea3fe0a72cd0fdf1b72b12bd447709d8ffd4f9fdd8fef9863e960f4da9812975fb2ba38270d95af525fc11784efbe40ad2b27320a38a8fd19acc058c4b3705682353045a813ff31eb9bdee7bf9227b2a753e314d23a3ad11816610bf1ad460c10f2edb55898741e1f0a91130bbf979060ad0f07df34db868b7f4067ac63a16ccf2dc9f6b9fe0c132e78bcb3efbeefa9d0d9d96183baa50d7740c764d3b2903b3739c9e007304ad30621f1f027818ee143d4fe0bc0521a3dd2a43ffe78c8869d86539f58d4c90055122e31610bceda2f18cf578711072cf08262dd9eddbf931592a0c05fcba43261d2d3934d7bcbbc976d1591b77d44178887506e085cd794af5e5dca6f448810b17c79816bf658b6534769f51bc4b26854ee1b764296a2f777b4393c95c3e1ca4158e800f00e5322e636d7b69fea5b0d3b49d40f7354f6e173891dcf705f8d72414a1c2c1f1b985e8db4314614a27caebc906153f70e575197d0e2f8bdbd6dee111efc7763f731fe8c9deafadfb02ccdaf941201038cb736c24c07a0f380f2fbdcc2ec134de90498880f605755c9e2943b596f488a86e2ccd09d4a9b8f6015a4166c348230931f1a14deda1c1dfcc3675fd6ca3af3f3005e8abaec1e186c782216ad4f3bf2102aa837bcacb63f651b77b26f79c78a563fde0eaddffb7df574314c080cc8bccfd950a1767b6e8f6886f7acca3264b352c0484e3b862a81a6a42ebd0ee4e36e11dd3ce80547e3b03bc219e42451d62d3b22abe41807c61df0616774ebd4c7145232621b8be5b24838c2d5dc5f552794a1983bd668263b9395868a004c37294bc16aae00ff4085f4c3cb0ee1260328914049189d21b24bc8d1b25bba3f419d284e8ee4e1852082d64d9cf641fa7fe141fc09c95e4f481321ed45cc200f552985e33af7d3fd7349bb2c29f015899344d7f1595b2acd3fa5ff79b9247fd73846f81cbe957434805f7dc99af6bc3cdd3083dde91b3b07bc9f64a670d1866a77ed46b38aa0cf27b9e3ed5d37fead95fda6e865c19767657693703d612e963b1c3db74945e9bed877418f38aa81a88ccf71ac7f601487db305b65bfa36a0dcecc228c44d1a19c232991ead3c0d201513ee35c36a86ab33ba4a0c8793c272c0255c2e1ec0551b4a37f9ee7252d61f9e7c97394c3e547f4bc4c457dec7b24a8bff2a293605e2f98fbf9ddb8e7ad0f0160aa4f76236619fc5ec9bfda8cd48c7b5aa77f1ee9f6ac6ff726de107b3a1739d5b59423cb35f6a92ab1b646c807ee4f39fb7fefa51eeff035f5e7fd7cea8106040ed87e7cd4be80f1cce39948ae6b3a31a5b250704fd71f6c0344587c1865b4e12b2f554f7e4676572d3e0ceba7bc05a8b43137b5dc75b916029c4f91741075986b8b69fdea5cecc6d8ad74e04914c199a93b8fecfe5996d7bcdc5d52c1ac87f57396c49a061676f97406b1a4dcc0fded1ef004bb8974e361f75e583926f340d809b0159c936c6c783131fe62f5d78f408d310376eed0275ff1e405d3e0ee86a5d9e01911ba040f94aeed946b566969f6a076336e2496be702acbae04e417fedb24a5f563b89c5b1f168b845d066a1df644186153504e1f444279ebac96c8b0cd20c4aa4195eab467cd34ce81d2af031e9cc9e6563d51728edd09ff199de43da451901187d0f5582671997d8406facd4d2d5aa9e91ad5adc177b1a764479f914d5a46f2a998dd08c1a7dc161ac7d295067e537de4345fcb96ea037ba9d1f9a6859a063d318f2ab4f1392479955da42fdac1f16ea4f5ce5a600093d99ee06e9e54de813ce9482926c68dbc4606774173b04c7bb3733f8a4af758f1c05c9b88fdcb2da2ddfdc6c48caff16", 0x1000, 0x40}, {&(0x7f00000000c0)="3a03d6294266c2", 0x7, 0xb7c1}, {&(0x7f0000000200)="e46459de3621167027719a2e381295efb78ec76e62e264eed0ef629684ce59372bc61fecb808b417ef1e6cb0db0fad70544cf74a1015f453f17bb4ce9a04f09ce0389b3e51af317c3c2db068002b0afa", 0x50, 0x3}, {&(0x7f0000000380)="be3cc96cc82219ddb9e221dcec44af67a3e46a43046f4f06fa769e152042a712a93185b778c937e0ff317347781523e8be0c2fa48bc7930e945f8d42fafc857503201a84a9aa22ea3dadd7a8d5d30cb83882133a1f589ab5c218f50bae936a1642663a82eb3307e435376b01743a9dc87fa1aa044073ef17cc057852a0ae6385e7c3c229edf91bb21b9b5d1783565dd78089131a20c5558aa737fea8f4c40f", 0x9f}, {&(0x7f0000001500)="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", 0x1000, 0x80000000}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2710.017004] syz-executor.2: attempt to access beyond end of device
[ 2710.017004] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2710.017918] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2710.073638] loop6: detected capacity change from 0 to 264192
[ 2710.080500] FAT-fs (loop6): invalid media value (0x6f)
[ 2710.080923] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2710.105480] loop3: detected capacity change from 0 to 40
[ 2710.896379] loop6: detected capacity change from 0 to 264192
[ 2710.897484] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value
13:56:42 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:56:42 executing program 6:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000180)={0x0, 0x10001, [0x2, 0x1f, 0x8, 0xffffffffffffffff, 0x2, 0x36e]})
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x123008, 0x0)
mount$9p_unix(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x140000, 0x0)
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe2, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x12a600, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfe4a, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0x1, 0xffffffffffffffff, 0xa)
ioprio_get$pid(0x2, r0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000046", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file2\x00'])
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100002200000000000000000000000000000000000ad5b9cb5bb61dbd69175451e90e81190ab6bc200673a3082b877fc6f13571f4fffd5384fe3e7584d18253d8b4cd74d4c2e86429e83fd07ae5fe10a3e6ba6fd2dd79ab665c7c6c4ebb773add53606e485c8223c7b413e47cce"], 0xb8}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r5)
sendfile(r2, r1, 0x0, 0xfffffdef)

13:56:42 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x2026e1, 0x0)
syncfs(r3)

13:56:42 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r1)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

13:56:42 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:56:42 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2725.957529] loop3: detected capacity change from 0 to 40
13:56:42 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:56:42 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101242, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2725.971041] FAT-fs (loop6): bogus number of reserved sectors
[ 2725.971908] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2726.022600] loop5: detected capacity change from 0 to 40
13:56:42 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0x0)

[ 2726.029973] loop4: detected capacity change from 0 to 40
[ 2726.054710] FAT-fs (loop4): bogus number of reserved sectors
[ 2726.055929] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2726.094167] loop3: detected capacity change from 0 to 40
13:56:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x3, 0x7, &(0x7f0000002500)=[{&(0x7f00000002c0)="ecd5eac71ced1920ec28f956e0b14aa3e5efa5782fe90dc4ad893a5cc86f82d6c3d209364b6ee3d0c1c2659a2b659e2ef2ea3bfa5b2cd8b5a2b772e460d7f3a7d410c276c1ea7d77abf71fd8cc8ad6e889e441bf7f1630a63db8a18ab4700c00fd4900a09344056d145a19f81b347ef2a9c0937000dd336d095d4a562610be3cfd0dcd47b0bf7dd46f9a4c69e6", 0x8d, 0x228}, {&(0x7f0000000000)="5acf38e5e796d876ac2e28a964d78d39627c367f8d8abaf96d07e30c3ae03e98b063752b4eb8eddc1f7f3f34a49bfed31883a7bf0305428d2a1cfb0b70", 0x3d, 0x8}, {&(0x7f0000000500)="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", 0x1000, 0x40}, {&(0x7f00000000c0)="3a03d6294266c2", 0x7, 0xb7c1}, {&(0x7f0000000200)="e46459de3621167027719a2e381295efb78ec76e62e264eed0ef629684ce59372bc61fecb808b417ef1e6cb0db0fad70544cf74a1015f453f17bb4ce9a04f09ce0389b3e51af317c3c2db068002b0afa", 0x50, 0x3}, {&(0x7f0000000380)="be3cc96cc82219ddb9e221dcec44af67a3e46a43046f4f06fa769e152042a712a93185b778c937e0ff317347781523e8be0c2fa48bc7930e945f8d42fafc857503201a84a9aa22ea3dadd7a8d5d30cb83882133a1f589ab5c218f50bae936a1642663a82eb3307e435376b01743a9dc87fa1aa044073ef17cc057852a0ae6385e7c3c229edf91bb21b9b5d1783565dd78089131a20c5558aa737fea8f4c40f", 0x9f}, {&(0x7f0000001500)="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", 0x1000, 0x80000000}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:56:42 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES64], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2726.199882] loop2: detected capacity change from 0 to 264192
[ 2726.205830] FAT-fs (loop2): invalid media value (0x6f)
[ 2726.206374] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2726.787519] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value
[ 2743.222012] loop4: detected capacity change from 0 to 40
[ 2743.224053] loop2: detected capacity change from 0 to 40
13:56:59 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0x0)

13:56:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:56:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="72756809af262bb3079ef6d849829b45e76b6c8e4e052e88ddc8a709d879cd37e1601fabd3493606df26fd94065b2df543ba65383a26b0a8cbf3dd08ebddfd1c1327c78f2035e46e53687cc9ff4a82276d890670077907115cee877b11cff7e30cc78b75ab178af48cdb60ccc335836147e1a24ee379628e4f83f5583e549b5ddafb69f6e70e38ad46ad7ab2954a84bb063c4f1f9bc915ae9b9d41b4d7ff74fb3ef1797ce45114e73f2de2361d0edd5de99aa7d08197b82507fb8c6895377bdcb598bbfe9406a38f00334f090f299885250282efb615ddbf642b552f3e4d45840ceefaadbb13b51a729823943d922470433f51229af119ea7bd4e8c1be5cadde9829283841463f13f127642cf26ef9965bc7c59959b3ee0a2872377e125b42ebbe11abd401e0de7b17264fc10ca3611c2281aa46a334d07e53d0ceddaa97381a3d0131a2c3c3c57504a9dc367afb1e3cb57e481ddbb1b274a66cd0c279c423beb4a93f88d41dc20dbf6c4e7748ceeb9abf02247113d17ae6fdbcfb4d6328ab34457d3da0525886bc947af10d6cb6d4a55b05ac4c370fd9e76e659e49d11a92a74f31876c6c7a071cbb2eadd39ee7bd20ebe54d0a7c051083e0dc20ead2c03ac9f884c81ddbc238f72b920ef7a7f4e1ae287150fb1a2f739ec2476b29049c40e083cc703f15b0e67256c9b089c37dc56a94546fdc0fa741d6e9b5ee3cf4e46ea41431fab688f4e43ee3dabf81e182ae9524fa6109c1ba94cd06d8eabdda10cbc1edd3f05fba600daf5e0a7aff61e105b03e18b508d1996c421ceffc4cec5c9d74ddcd5141158fb3ac5b87cb62499fb768b3170c0f2a1f47bee54aa4a9b1c16190b21d88f8430765ba129d441944140a0a2a21388e8e03a5a0d5667527f11506cdfadfadf8bb49d8590dfa5001a9911eefeeabb577c6020051b07183dceb69d2e8cc2295cd811c7e2c4feb2e9d935342ff3056a28fe5738b630b43aabea396cbcae8765af92206fa9c5f40a8e320552181ab9bd3ac963e51877a20ea4c4b4351bcaa9167380a53dcba4b3cf901748858461cd2eb0b082a5f8210977d87893779035b0dd1532d238f8103cbeb0b4bd242573fbc017c4d4019ec3a6f4255b95c5e642ddff8f50f6449940055e1f9e77396f0c46fc3a775972071dbb43ab94da666119e39c5711b86b4dfda3f8339df10cce1b32fefec332e7a2e81444989bef77d5092dc4f4e56693339e54a779617aa58bd5877b7e1ab31128d2d4a1b56758700c81bd5f6396e6c7ebdc7252881ca5231294fa526502d8bc82b29dcd8fa99e1ab5cf1204d793b8b7804fb8ca8fed809a68866153f707f349025981faea762b711f7a970de77aca8804ad059bbf38d8e308bcc0de86dcb9cedf8595a8e0c0bcc8966fee83b25041dfbe5016c2e56021fe8adc256de9f47e43a4b1fe986ca1c062fa878a43f588510471ab1bd6b1c6f465864e9a9184d593ea6705d23b6bdcc869c3bdc08d9dd3f8538447f4866ea499b0a87d57edb132483020bdc6c7fe596275319bc34aed8585c0a763a8b3dfd371210fa660d15d4185c5c9d94c97c781e4db5e012aee578e0186d5d0940c62a0c6d8da24bf3e51108ea363911d00852a7e26c459048d77142b9e17197a84a7c387b373ee1d1dec7d3dbae9aacc37214dd67c70ff6a0e63be0e03823b3f53e219a514a5e73fd2f779983495e4fa0355abf399a58a5ef0d8278e4eea3c2dd39f2bc6cc13b18e1fe6d7a524956b14581ac08945c2b6b7a05a3b7a3f6faf2aa5c379d2abb7812b4600128046eab57844919bfd507b5cf57245fbbc51189364d87191e5e0660fe1a3324cb1174525d5c7c0eb33a1040db44a33b5453db06b00607d613ed0847d6afb4701b900cb3656994b12e9b57b5193db6e667013d4e48d56ef36eef6e70eba83fb703b7de1a0eb813c734b0156c08376143f7a8dd60687fd4c84a60a5f49d142b32b8fa04a7cc4c957f876bd2ba8244e8f575517f378ef3c9efc53dd330b553ef4c09622abc25d16197239e8dd678a642fa4e87ba89da30fd5124a9487b3ee68c1a6a5b0fb968fc7efd1918a1dc3bc24b85e1ccbc2fa8c6374d0417f7f2cf5cd0b9b48b721ceedd33ae7abc34dd110f1b6cd9f90f117cd9c64bff39beabd091ca332f7fcf20d6caa4f6194986ad985f2e9b8ca1096a37ff822123665e6eca0fc8a4944ceaaaa9e4f5e9d02f55afd0dd92dfcd4c5c44ab194f0a9de3c6dd4dc3b26fd7414b34613f1313a39c54073012d4b88d16750e1f93c097d11648190cf7dcfecaa14c5d38cea08af99e97e7142a00c5c74ad190d879d5820d8c14ff152084ba819e183b841f3da14ee69b81fc76f16ab8f13f84f03336de1a92f2a7395e570d79785d5ba40ed8601619569065642c47a914d9654863ce99a93398f3e48d7b5b56ab254f5257a81b9eda8a5b29235e6d32d8b819fa2e278b6ba6bbedcf20d3536f1805ceffb118de30715d883ba6ce127296fc0ac4385a6b29b2fb16afefd7ee488894bcd4eeeea4b3c749b54cb7cdab1468a3831515ec3f4764a8f9aac8d7c71ed6ff590a6d59425bbdbe045dd892408983efac87e2d7b256926b6e91cf4a0c3117a30e892dc5579efa0f315753676913ce3c3edebd77b03d5f1566bb9013fdbdfcc1cd9268ad806dd9cc1771305797c3db2b82abc0e8bee8fffe9502474fccd63b9c2fec558888bd1eccef43b95bd80d5da5c9428bf5508e562e7230b0e70dfbc4a4a4ed85e4647a72470ce4ef44be0eb7c7a6311301464f85894238a41b2fff872fe71e5b2a0349bf9fa02a45d17303340b8dce271ff27c44ce277055561767378085658fadaef63d613d31b81649a5ef5094c1c9a0de1c03a212db2bf3d7759d5321dc26d07d0ab78873bdf2e9257603116eecd23f134efc42879bd8d1370624220b7f94130658e941e3bcf54eb893db05a82041ba5e5a52b08e602e9246cbfb9fdd8aba91516e8a707c7dad3c240641281fe85078c5915da5dfc2228797e8e3ef120983b390fac30caec6ea2ca09ec766f9cc158ad0e6cc48962639d4ece3ae85d467a1a9b8ee3eafcf7294261d18327f48483b5f256c83fb1ab3f528331a59910608559e99ede35d5e840569742371d3c438ad1db67bc28b5304c1ee0f605b140075d19dfae5e66c9d6d396ae279d1180761f3de388f5ebfb5c1afff53121b708fac0bc86ed918c5ca9e61c00f08a6bb70b89b6ec741e9e59a9b89c68fc2034af4a29929b7f77393077608739ceb4e029b85aabf7ab1a3aa6c01384d40d09b5263c694eddeedd9576cabfa450310bf3d1c39a6207eac13d611049049bed099a905593920ebd0b7daeb342f4005ddc8056416e526bb0469a11f6b549b84ac9afdfd0ed6f42b8cda12f2978fce9bff8b660528f5c3fbf4a2bdb6779db14b779d2071662657e58ea4d0a66fb9795d6fd35b0cb73e53ff4b59ac419ebca05834bc4108750e92fe207bb5536e1a5f3b02569870c37f06dcf8024a19ef98022770e53e652ce62d8a8f48dafc845b58b1ea8bddbfc05d9086fae37c6ee4bd06401e1600045de97c9c575c4e026e1d880db0b7e4b21ba25c56c5078af57b856fbbd3ad4aa8f59d00e83989f5ca8ae048d54689aa7b07a3e0793c80b5ccac913872241a3621f7afae09395143d5b2d2ac5175dc28208ae5876a22bb00c7c10111ad3a9144a2abe65516bc0d5007ca1adaeead202d6acefa173cee72cab6172806b5a230e9e18ae66331728ddd5e11557a1187be09e9cf4de94328cf61adca68c7d4bf2296e5993bfc1be4368579abc55644267c4640b22185b2373e3231d401ff45590fb1e5c74990c18abbd52aeedae0a6995ddc2959edd4245bc55b7875f6b2471ef169a1f4770f00a004b110031c38a0efd7df0b7bb7b71457d8de013659483c607060446069167ec4aab3ee020bda1f739d5e4940bc0fe820537701f89651a26742bded08ba3b493a23660ffae5f9932da671835612537cabc5dcf98b78efa8305b891f4da59ec660a81e23061674b2433c229715d6e83d67f9060584b126be6de56bd52c53546082e7869f2981101a53f601fd3e1aae97ffa1a7ec9190aa9cf1f715d004f8b10faf827941be8ac4f204a5cc6f8c4a6014d41dfade965f954bacd922cf7dbd2cd71c803b0da8106cd894fd3ed08cb9baa82ebb478909f48326ddcf829f7ad30c556a112a67601406dc0d5f73c7cbee04942b2bda417e8a5e8d41965aeaff4d1960fe6db7f2084391b2d384f69197b77304a25dba28adb567b03e0f484531d29c45b8277e4ebab0b7b710bb7d1883b46961d871ec51aba3630fdbb4a6d458d3ba2f64d5a6e61c57d253f8ffb3816c0e96334b843c55a7fd0c6a786b0c9e69849de3c485c26155e42ada340e1b4a7ddd2b99a9dc1602e00c5793c844417f8191723f9ab5fb75230dbfd7765198877888aa19670cdd0124993de4c79d9ef79a3f02e820f46c32cdd966f0269b721d73e572ed8f654f25d2f7fde80d3ac6c41e3b539a6518f2acb143b10b27d5faadb504274f921d48fc0fb9bda769d89feab7e1d076b67fc311a3e4e330470b395099910ffbc734c8418f67caa90df741fdae2e1f77210989ec97f99ce64c4a802a38e991412f601b825bd01851d46a6a90cd93d3573a28d666ed03fa8d2c8450fa67b785d484eb58524fbaf511c6c1a145611376f41cad9bda2b8c49fd6db7deffc22cf715f5c04e1bdcce9ff14562a0a8f97c0e3638fd944071e09dfc41587687552198f4bba387f8ba9d208a4b95527cb3945cf0445ccb190dbb2ccb30278d813c907a929212b7f40c74af2619343ea041b4d1e43ccd1cd8e61e2c6a8b3821f50aeebcadaefdedf7aabc81964cb0bbc0c212abd295ad89563c47a9402530d1db9a0778ba936c1d775ed7021ef193ab27000964a93718bc717d20d3109d6bd5de046578cf185e6b54a24d80d5285ddb3e494ba0bf7e417587cc5459ce4ed966cd470f42f3941be7204c2d4448c06e19fee764c0adc26b6dc393c7a8ac4f123af64a873b011281b1e05b712ad75caf24cace740cefe6af53b8665697037039896c3466a8a11ff7ef1a658a1a8b93c7a1dd4ddb8df683adb2565f6e8173763bf3375f6c81b193f22542f5d990db0b899ea85af166511c39f241a972543146c9add6301df5346130ae76bc71cb0780d7fbe554f6c0df6839f8d44cdec7a825cdb5abafd7e81d687923c3d5f388a5d598d68b7aa7d18133715e43dbd597b6a467fa389deeab55aeacb0696393da718566b0526d0d4613708fe140841dae786f8a1a24b0aa23ccb6141ae10aba059bae3c62701d074e99c48490382d083ea7719b7a4f23bb383025cd67487ec93d6709159d85089ba9a80c87c89964fd386c1ebb1bcf020eb353cb0a677c7c516f1285eefdf1d81bfef181d59355c43ea272e396ffbe5cde6fd423aef1e21f31ffa4fbb137389b53ddc9aaa9e38613017166d514f1dac7df1dbd569e300e2677c055dde0ccc0cb33c4bcd96a581346f066bd605c840560dfc6eb3d748b41fb9e831bf3e80e0fe9a61112e2fc0bda02066e38bf5ed7bd124b0cb69fb655d4a3ecd00c0ac675af28be0e201afdb995a473efcafd4c202cac129c8d24ba6a19e0fc60e34bf7e4aeccf9deefb279c5be258f5f0b9813e8ece3e7a0d9252883eeb53443c8acae2b5bd9828e5f9ad2ed01ff372490d3d0326d5ed9b4fd96b27c3bf5af9e8b572c5b3c62ce8ecedeae23a390270a6297daf1388c81563d152afe2670661b29ffcae21cd867b7eb6c887ce5", @ANYRES16=r3, @ANYBLOB="01006d35bee3dac02dd2d7e298893655ab36325032ecd02013d72136592cf5bd0946b6f9c0b76624be23d7e9c5da0eea800ddbc8a286960dcc2973436f840449e1ffcc05b88fad12f2b958be1efdc1156b99212e9130a3bc32dca748558b427c3c674d32c196cd48662d2e3f2ce1dcc3504e91c892fa87f9e3349fcfcd5899bf003e8c7172c876ebbe84304f67b2561bd04858fa264687eb30a4240b338b0b6aacc4676d5dbb7293811e753f22a69b7ef1ce2271462dda9aa5048e4c0736ccd7c28a36"], 0xb8}, 0x1, 0x0, 0x0, 0x4008091}, 0x48000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r5)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:56:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:56:59 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xff000000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:56:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:56:59 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
fallocate(0xffffffffffffffff, 0x4, 0x6, 0x566)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a0000000000000000000000007f8c0001000000000000000000000000000000000a00000000"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:56:59 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101242, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:56:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101242, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2743.269016] loop5: detected capacity change from 0 to 40
[ 2743.269551] loop3: detected capacity change from 0 to 40
[ 2743.283355] FAT-fs (loop4): bogus number of reserved sectors
[ 2743.284610] FAT-fs (loop4): Can't find a valid FAT filesystem
13:56:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:56:59 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0x0)

[ 2743.383597] loop6: detected capacity change from 0 to 40
[ 2743.406215] loop2: detected capacity change from 0 to 40
[ 2743.507859] loop3: detected capacity change from 0 to 40
13:56:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2743.557893] syz-executor.6: attempt to access beyond end of device
[ 2743.557893] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2743.559781] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2743.586602] loop5: detected capacity change from 0 to 40
[ 2743.612471] syz-executor.6: attempt to access beyond end of device
[ 2743.612471] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2743.614129] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:56:59 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2743.728467] syz-executor.2: attempt to access beyond end of device
[ 2743.728467] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2743.730181] Buffer I/O error on dev loop2, logical block 10, lost async page write
13:56:59 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:56:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2743.797023] loop6: detected capacity change from 0 to 262144
[ 2743.826464] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2073 sclass=netlink_xfrm_socket pid=13134 comm=syz-executor.6
[ 2743.880235] loop4: detected capacity change from 0 to 40
[ 2743.931917] FAT-fs (loop4): bogus number of reserved sectors
[ 2743.933194] FAT-fs (loop4): Can't find a valid FAT filesystem
13:57:00 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000006c0))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000740)={{<r2=>0x0, 0x40, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0x9, 0x1f, 0x80, 0x3ff00000, 0x3, 0xf614, 0x5ab9e75}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000800)={{r2, 0x5, 0x6, 0x3, 0x80000001, 0xe66, 0x7f, 0x1, 0x7, 0x3, 0x40000, 0xa101, 0x8, 0xff, 0x5}, 0x10, [0x0, 0x0]})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000880)={0x1, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e21, 0x1, 'none\x00', 0x1c, 0x2, 0x58}, 0x2c)
pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)="09bd38f60f9377103b377ccdea91f68607f4480d6dd63e06c969d228f1c3221e3455a25f9fd5a54abcab77e499f847e1be0ef66e76704085c68e0a09d4fc01f7c1b1c9542b30e1d0b38f6b83500257fb5a81cf35aac61ad732547bfc5dea4dbe5019b3cfaed3b291864f8b96b1349b66e225eecd4c365e95dcc1517b16113660683f8b3bbaf1af61ab0e03e121a92297c84747bf61616627bf9b59df1a9803a861a7ae559b123a81a3490a9e0aa3d89d7e476ac136e1544bfe37a990d68c5f89e9c544e920849ceef7d94e3fb99191fc7b89683aed47cbb314a56c5de13d524c9ae9", 0xe2}, {&(0x7f00000009c0)="6fe32d1b6d36ea6765ebfbd537e7c54af738c7e6e1b66aba7ddfaec3675a65e5921afa001137718c72b8f36925d3b27c25d9f7f1b49e6a7ca34eab30638e5496adbd44a7916159e8f8670850bf92bc9196f814bac6010b360cdb5d51fabf06e6f27579f2213df33bc72f17a8c991b60e7a55606b8074fc183e89cb9a8bfb", 0x7e}, {&(0x7f0000000a40)="4a5d278202be05aff96c8ffed13be01a154c443bc12ee4d7e727f207579d6d21a849ac5848d2aa3704ee8f61e051449eed35c1ee84d3d19e41517c5c10f83d3d7a761b345b033c12b5e2b0d43f18394f4d1c67cb8e2c3f4a029753447c44635cf39a464610fb3dc6464d73f8", 0x6c}, {&(0x7f0000000ac0)="7b26706b831d3ee149e35ad85fb9367612e1b3df84a0c72b7b1781fb75", 0x1d}, {&(0x7f0000000b00)="101ada5036eb89bff02110ed73f759f856a8330edff6bd0cc416255f7afe74e6047e07314029e009e20f0be848779ecc8e06de", 0x33}, {&(0x7f0000000b40)="7f7b17a864b68f94fff9154a8ac06068ba0263fee407d589c0cbe96d67c9bfade0425baf907f13142f4b88e74b2c6c94ba9069a939d5e0c0a149858a9198e74e5f8d0e", 0x43}, {&(0x7f0000000bc0)="e399698ea37214c6faabf38227cd2ec1315e70118665d2f8bc1f5b262bb9a535e975cd0daea76ed7b7611dcfab2fc6a058b60b82266fa1c42c71d5d5289a9cd24b91babe5814adcb9731b9ee8ad105fc64a3edecebe1d36bf2624060dbb1e5bd4212c87ac2f2d05c97c1270c7327af8dff3345b1ccdcd27f6f653fe704e1aba2201f1b98dc3aa04e3863ba602f237829a9cbc5af6d91bd245bd4f52c988e9f5857352d3a4da1a66ab76fcc496c4effeaa3641ef982f275e07f80e2729ade8b94", 0xc0}], 0x7, 0x6, 0x3f)
lseek(r0, 0xfffffffffffffff8, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/udplite6\x00')
kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, r3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000dc0)={0x2, 0x6, 0x1, 'queue1\x00', 0x1000})
ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000e80)={0x1, 0x0, 0x1, 0x5})

13:57:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2744.021842] loop5: detected capacity change from 0 to 40
[ 2744.119051] loop3: detected capacity change from 0 to 40
[ 2744.138036] FAT-fs (loop3): bogus number of FAT sectors
[ 2744.138923] FAT-fs (loop3): Can't find a valid FAT filesystem
13:57:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:57:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
llistxattr(&(0x7f0000000000)='./file2\x00', &(0x7f00000002c0)=""/222, 0xde)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x114600, 0x4)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000670000000000000000000000000000000000000000f5ffffffffffffff0a0000000000"], 0xb8}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:57:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:57:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2744.406976] loop5: detected capacity change from 0 to 40
[ 2744.432432] loop4: detected capacity change from 0 to 40
[ 2744.446558] FAT-fs (loop4): invalid media value (0x00)
[ 2744.447374] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2744.508776] loop2: detected capacity change from 0 to 40
13:57:00 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101242, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:57:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2744.654152] loop6: detected capacity change from 0 to 264192
13:57:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2744.777516] loop4: detected capacity change from 0 to 40
[ 2744.783004] FAT-fs (loop4): invalid media value (0x00)
[ 2744.783770] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2744.800481] loop5: detected capacity change from 0 to 40
13:57:00 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80002, 0x29)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0/file0\x00', 0x501040, 0x4)
syncfs(r4)
sendfile(r2, r1, 0x0, 0xfffffdef)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180), 0x20c0005, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@cache_mmap}, {@version_u}], [{@dont_measure}, {@fowner_gt}, {@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@appraise_type}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '.[@*q'}}, {@smackfsroot={'smackfsroot', 0x3d, 'o{:'}}]}})

13:57:00 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="0700000001", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:57:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2745.072442] loop4: detected capacity change from 0 to 40
[ 2745.086201] FAT-fs (loop4): invalid media value (0x00)
[ 2745.087170] FAT-fs (loop4): Can't find a valid FAT filesystem
13:57:16 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:57:16 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101242, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)

13:57:16 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="0700000001", @ANYRES16, @ANYBLOB="00082abd7000fddbdf25170000000a081a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00200a000600ff21a5ffffffffff00000a00060008021100"], 0x50}}, 0x885)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:57:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:57:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1)

13:57:16 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r0)
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x400c5)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r5)
sendfile(r3, r2, 0x0, 0x9)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r7)
ioctl$DVD_AUTH(r7, 0x5390, &(0x7f0000000180)=@lrpcs={0x1, 0x0, 0x7, 0x4, 0x20})
sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r3, @ANYBLOB="f63e6b107d39342f11c3a0865dc647b8c7eb8fc3ddd19abd8e4c6a2d02cd0299705b7c968cd370d14901072d9eb9cc18c68365fbfc4fda7d", @ANYBLOB="9dd117cd4d1f3acc40724862890a7f7e6e755333252a5104461ebb3d9098feded4b54ce12409743868115eb2231e734a93043813f3059282576e15556bd99955a77a68812e486f607ea146dfa7ad33629a3c7d3709862b410a31acd6b602d7e24a9af9e1fdd39e4741f5d426dd55047c734086a99e01abf6ff837b76f83a29800ea8c0376ff503027aa0071de3594adcfc4d2e8283bc45198f7e63b0393eb37854339ad822ccd65c8e5b7a4f51ea511bf6e679ada8777bb280d530fbbcf246bbd3e81a5e1d6149e457d4dc3688b13f50", @ANYRESHEX=r3], 0xb8}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'})
r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x4b0240, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0xc0506617, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc4}, 0x3, 0x0, '\x00', @auto=[0x21, 0x35, 0x15]})

13:57:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:57:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x2, 0x3, &(0x7f0000000380)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f0000000200)="878284eb39da71f46725f23d2181cfdf59ac93270d2747c213e4e845980e7873aa00a26b06b971c1e620838ea697329e4a09b91f6027e3c5bbc7ed3b3f0900000096365d98130d", 0x47}], 0x410, &(0x7f00000002c0)=ANY=[@ANYRES64])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffff0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
r4 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x1)
sendfile(r1, r4, 0x0, 0xfffffdf0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r3}, './file1\x00'})
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
pidfd_getfd(r5, r6, 0x0)

[ 2760.183003] loop2: detected capacity change from 0 to 40
[ 2760.190795] loop4: detected capacity change from 0 to 40
[ 2760.194923] FAT-fs (loop4): invalid media value (0x00)
[ 2760.195403] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2760.209373] loop5: detected capacity change from 0 to 40
[ 2760.223400] FAULT_INJECTION: forcing a failure.
[ 2760.223400] name failslab, interval 1, probability 0, space 0, times 0
[ 2760.224206] CPU: 1 PID: 13195 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2760.225030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2760.225661] Call Trace:
[ 2760.225887]  <TASK>
[ 2760.226053]  dump_stack_lvl+0x8f/0xb7
[ 2760.226429]  should_fail_ex.cold+0x5/0xa
[ 2760.226716]  should_failslab+0x9/0x20
[ 2760.227115]  __kmem_cache_alloc_node+0x5b/0x400
[ 2760.227483]  ? alloc_pipe_info+0x109/0x590
[ 2760.227905]  kmalloc_trace+0x26/0x60
[ 2760.228228]  alloc_pipe_info+0x109/0x590
[ 2760.228620]  splice_direct_to_actor+0x6e6/0x8c0
[ 2760.229061]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2760.229499]  ? inode_security+0x105/0x140
[ 2760.229848]  ? avc_policy_seqno+0xd/0x70
[ 2760.230265]  ? selinux_file_permission+0x3a/0x510
[ 2760.230660]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2760.231110]  ? security_file_permission+0xb5/0xe0
[ 2760.231546]  do_splice_direct+0x1bc/0x290
[ 2760.231942]  ? __pfx_do_splice_direct+0x10/0x10
[ 2760.232326]  ? lock_is_held_type+0xdb/0x130
[ 2760.232790]  do_sendfile+0xb1d/0x1280
[ 2760.233143]  ? __pfx_do_sendfile+0x10/0x10
[ 2760.233551]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2760.234007]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2760.234500]  __x64_sys_sendfile64+0x248/0x2a0
[ 2760.234805]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2760.235246]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2760.235597]  do_syscall_64+0x3f/0x90
[ 2760.235930]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2760.236270] RIP: 0033:0x7f61b5a02b19
[ 2760.236591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2760.237707] RSP: 002b:00007f61b2f78188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2760.238368] RAX: ffffffffffffffda RBX: 00007f61b5b15f60 RCX: 00007f61b5a02b19
[ 2760.238989] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2760.239626] RBP: 00007f61b2f781d0 R08: 0000000000000000 R09: 0000000000000000
[ 2760.240251] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2760.240874] R13: 00007ffdbc84f80f R14: 00007f61b2f78300 R15: 0000000000022000
[ 2760.241522]  </TASK>
[ 2760.247708] loop6: detected capacity change from 0 to 40
[ 2760.272831] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value
13:57:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:57:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:57:16 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101242, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:57:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2)

[ 2760.465595] loop5: detected capacity change from 0 to 40
[ 2760.495800] loop4: detected capacity change from 0 to 40
[ 2760.517080] loop6: detected capacity change from 0 to 40
[ 2760.518095] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value
[ 2760.525501] FAT-fs (loop4): invalid media value (0x00)
[ 2760.525984] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2760.560058] loop2: detected capacity change from 0 to 40
[ 2760.620477] syz-executor.2: attempt to access beyond end of device
[ 2760.620477] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2760.621670] Buffer I/O error on dev loop2, logical block 10, lost async page write
13:57:35 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2779.751524] loop2: detected capacity change from 0 to 40
[ 2779.760166] loop4: detected capacity change from 0 to 40
13:57:35 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5eac833fa4dcfc8a, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfb}, 0x9}, 0x1, 0x0, 0x0, 0xc8c4}, 0x4000000)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x10802, 0x14c)
openat(r4, &(0x7f0000000340)='./file1\x00', 0x82840, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r5)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x200000, 0x50)

13:57:35 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 3)

13:57:35 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101242, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

13:57:35 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:57:35 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:57:35 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8480, 0xc0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@getae={0x1a8, 0x1f, 0x1, 0x70bd2b, 0x25dfdbff, {{@in=@multicast2, 0x4d4, 0xa, 0x33}, @in6=@mcast2, 0x10001}, [@sa={0xe4, 0x6, {{@in6=@mcast2, @in=@local, 0x4e20, 0x2, 0x4e20, 0x80, 0xd9490f539b771711, 0x80, 0x20, 0x8, r6, 0xee00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x34}, {0x3ff, 0x7, 0xec58, 0x1000, 0x1ff, 0xcf, 0x9, 0x8003}, {0x48, 0x3, 0x33f4, 0x5}, {0xfd82, 0x21, 0x9}, 0x70bd27, 0x34ff, 0xa, 0x3, 0x1, 0x40}}, @tmpl={0x84, 0x5, [{{@in=@multicast2, 0x4d4, 0x6c}, 0x0, @in=@private=0xa010100, 0x3502, 0x1, 0x2, 0x3, 0x8, 0x1, 0x4}, {{@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d4, 0x92}, 0xa, @in6=@mcast1, 0x3506, 0x4, 0x2, 0x9, 0x4, 0x0, 0x3}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0xc004841}, 0x10)
syncfs(r3)
openat(r3, &(0x7f0000000000)='./file1\x00', 0x4000, 0x91)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r7)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:57:35 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2779.780058] FAULT_INJECTION: forcing a failure.
[ 2779.780058] name failslab, interval 1, probability 0, space 0, times 0
[ 2779.780895] CPU: 1 PID: 13231 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2779.781478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2779.782057] Call Trace:
[ 2779.782250]  <TASK>
[ 2779.782423]  dump_stack_lvl+0x8f/0xb7
[ 2779.782716]  should_fail_ex.cold+0x5/0xa
[ 2779.783033]  should_failslab+0x9/0x20
[ 2779.783330]  __kmem_cache_alloc_node+0x5b/0x400
[ 2779.783697]  ? alloc_pipe_info+0x1e4/0x590
[ 2779.784020]  ? alloc_pipe_info+0x1e4/0x590
[ 2779.784339]  __kmalloc+0x46/0xc0
[ 2779.784602]  alloc_pipe_info+0x1e4/0x590
[ 2779.784918]  splice_direct_to_actor+0x6e6/0x8c0
[ 2779.785264]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2779.785606]  ? inode_security+0x105/0x140
[ 2779.785924]  ? avc_policy_seqno+0xd/0x70
[ 2779.786229]  ? selinux_file_permission+0x3a/0x510
[ 2779.786589]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2779.786970]  ? security_file_permission+0xb5/0xe0
[ 2779.787341]  do_splice_direct+0x1bc/0x290
[ 2779.787662]  ? __pfx_do_splice_direct+0x10/0x10
[ 2779.788017]  ? lock_is_held_type+0xdb/0x130
[ 2779.788351]  do_sendfile+0xb1d/0x1280
[ 2779.788671]  ? __pfx_do_sendfile+0x10/0x10
[ 2779.789161]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2779.789659]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2779.790052]  __x64_sys_sendfile64+0x248/0x2a0
[ 2779.790388]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2779.790737]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2779.791106]  do_syscall_64+0x3f/0x90
[ 2779.791386]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2779.791781] RIP: 0033:0x7f61b5a02b19
[ 2779.792056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2779.792087] loop6: detected capacity change from 0 to 40
[ 2779.793333] RSP: 002b:00007f61b2f78188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2779.793352] RAX: ffffffffffffffda RBX: 00007f61b5b15f60 RCX: 00007f61b5a02b19
[ 2779.793364] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2779.793375] RBP: 00007f61b2f781d0 R08: 0000000000000000 R09: 0000000000000000
[ 2779.796120] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2779.796643] R13: 00007ffdbc84f80f R14: 00007f61b2f78300 R15: 0000000000022000
[ 2779.797191]  </TASK>
[ 2779.797955] FAT-fs (loop4): invalid media value (0x00)
[ 2779.799779] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2779.805675] loop5: detected capacity change from 0 to 40
13:57:36 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r0)
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x400c5)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r5)
sendfile(r3, r2, 0x0, 0x9)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r7)
ioctl$DVD_AUTH(r7, 0x5390, &(0x7f0000000180)=@lrpcs={0x1, 0x0, 0x7, 0x4, 0x20})
sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r3, @ANYBLOB="f63e6b107d39342f11c3a0865dc647b8c7eb8fc3ddd19abd8e4c6a2d02cd0299705b7c968cd370d14901072d9eb9cc18c68365fbfc4fda7d", @ANYBLOB="9dd117cd4d1f3acc40724862890a7f7e6e755333252a5104461ebb3d9098feded4b54ce12409743868115eb2231e734a93043813f3059282576e15556bd99955a77a68812e486f607ea146dfa7ad33629a3c7d3709862b410a31acd6b602d7e24a9af9e1fdd39e4741f5d426dd55047c734086a99e01abf6ff837b76f83a29800ea8c0376ff503027aa0071de3594adcfc4d2e8283bc45198f7e63b0393eb37854339ad822ccd65c8e5b7a4f51ea511bf6e679ada8777bb280d530fbbcf246bbd3e81a5e1d6149e457d4dc3688b13f50", @ANYRESHEX=r3], 0xb8}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'})
r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x4b0240, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0xc0506617, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc4}, 0x3, 0x0, '\x00', @auto=[0x21, 0x35, 0x15]})

13:57:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 4)

[ 2780.003551] loop2: detected capacity change from 0 to 40
13:57:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2780.064275] syz-executor.2: attempt to access beyond end of device
[ 2780.064275] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2780.065176] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2780.102682] loop5: detected capacity change from 0 to 40
13:57:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101242, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

13:57:36 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:57:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:57:36 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
sendfile(r1, r0, 0x0, 0xfffffdef)

13:57:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 5)

[ 2780.283192] loop2: detected capacity change from 0 to 40
[ 2780.296951] loop4: detected capacity change from 0 to 40
[ 2780.322774] FAT-fs (loop4): bogus number of FAT sectors
[ 2780.323934] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2780.351516] FAULT_INJECTION: forcing a failure.
[ 2780.351516] name failslab, interval 1, probability 0, space 0, times 0
[ 2780.352390] CPU: 1 PID: 13266 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2780.352983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2780.353559] Call Trace:
[ 2780.353751]  <TASK>
[ 2780.353928]  dump_stack_lvl+0x8f/0xb7
[ 2780.354223]  should_fail_ex.cold+0x5/0xa
[ 2780.354546]  should_failslab+0x9/0x20
[ 2780.354835]  __kmem_cache_alloc_node+0x5b/0x400
[ 2780.355187]  ? iter_file_splice_write+0x169/0xcb0
[ 2780.355570]  ? iter_file_splice_write+0x169/0xcb0
[ 2780.355932]  __kmalloc+0x46/0xc0
[ 2780.356194]  iter_file_splice_write+0x169/0xcb0
[ 2780.356543]  ? generic_file_read_iter+0x330/0x550
[ 2780.356913]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2780.357284]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2780.357652]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2780.358053]  ? inode_security+0x105/0x140
[ 2780.358381]  ? security_file_permission+0xb5/0xe0
[ 2780.358739]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2780.359105]  direct_splice_actor+0x113/0x180
[ 2780.359436]  splice_direct_to_actor+0x33a/0x8c0
[ 2780.359779]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2780.360143]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2780.360508]  ? security_file_permission+0xb5/0xe0
[ 2780.360854]  do_splice_direct+0x1bc/0x290
[ 2780.361156]  ? __pfx_do_splice_direct+0x10/0x10
[ 2780.361507]  ? lock_is_held_type+0xdb/0x130
[ 2780.361829]  do_sendfile+0xb1d/0x1280
[ 2780.362129]  ? __pfx_do_sendfile+0x10/0x10
[ 2780.362444]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2780.362811]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2780.363207]  __x64_sys_sendfile64+0x248/0x2a0
[ 2780.363559]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2780.363923]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2780.364291]  do_syscall_64+0x3f/0x90
[ 2780.364560]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2780.364923] RIP: 0033:0x7f61b5a02b19
[ 2780.365188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2780.366414] RSP: 002b:00007f61b2f78188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2780.366945] RAX: ffffffffffffffda RBX: 00007f61b5b15f60 RCX: 00007f61b5a02b19
[ 2780.367446] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2780.367950] RBP: 00007f61b2f781d0 R08: 0000000000000000 R09: 0000000000000000
[ 2780.368448] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2780.368949] R13: 00007ffdbc84f80f R14: 00007f61b2f78300 R15: 0000000000022000
[ 2780.369474]  </TASK>
13:57:51 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:57:51 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000340)="04332dd9000000646f7366d8a001000000000000000000000000a9adac4f7e985500c91ad0c87e7402eaa83b7bb5466822344c6c82e8f0d61c83448b6d929e9c38d3acefb8e011e5705e9e76ad1a84e9fa2184ef443a7455aad25b82b29f21c3647a112f2db760b890", 0x69, 0x4000000000000000}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
setxattr$incfs_metadata(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000240)="5fb3eef74e0ab9c34f5c8aa85d13", 0xe, 0x1)
getdents64(r2, &(0x7f00000002c0)=""/105, 0x69)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:57:51 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 6)

13:57:51 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101242, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

13:57:51 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:57:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:57:51 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2795.530168] loop3: detected capacity change from 0 to 262144
[ 2795.533598] loop5: detected capacity change from 0 to 40
13:57:51 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x4000000}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @loopback}}}], 0x20}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000003980)=[{&(0x7f0000000400)="ada009fa0f36b31c5dcaec91545d72be00fa0844a5c9aff5f4b3cbefc378af6a2ee9b22e7e6f3dc345ca3fd8a1137bc502299c6bc2fa3fad6c800ba9cc95e2b3efd6a3167a56615898c08552d2bfd177ddd19d5507fabf54c54e7e0c38fd7036ec29566271c228b647db3eb21ef9a17cfc6486be1b564fb72267b241d554ae544b677cd99fae3a1bed0849f8f498a484499ba0ef4640bccf02e97e8ceb31dc30ad87c50df882cf13c98fb65274fc", 0xae}, {&(0x7f00000002c0)="1198aa", 0x3}, {&(0x7f0000000340)="b0e2cc4e71fe87bed50fa6a22e14004d62664061f978ffeb994909b39a924acd932ac27c7782eea13cf70df3d5c23e68676ba6155a50f53325d6bf", 0x3b}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="f47262c5b27450d1b7851d878d438379e48e41869982e82e7edc89cbfe8cd6402fabf615f037b0880c5fbe5e329df2d853459ef5e2ae7d8fe8ce681903ba32636782508be1d3c8ae8a29de37c7c2807bb1d3c36215c34c5927c8f0cd6aff9fa42a82b222d7cd5aabc71d364c8c1c2af40c4427acee63efb1c3f1ab922780acca9cb62480a5b78b5948412385fcde8a4274e05aa8df83", 0x96}, {&(0x7f0000002780)="e07db914e71d46dfc0bcb6b5488728fde5ced824800d16aee293d7939713b16ddcae63724c5ea2c3760d7694c972240a998c05196f2b7bee1e0f788fc96171094b0ff090ead2909068e46943c2f38cbf6479f230efd8d1185e41f95fcfaad0e12c04c6e591073d5f41f67268cd5cbc53266bb8a6d222ef89e9a1a10de527570b57a273597d49ca3164002b634150236e7390ec7d908965a47fc63845275f4645d3ba2b96073739306974f466231ab1c9aae099a45ee101879d16cbdb8b2722834f010da9b9145f1d9ff2c7d60c886692c288e7fbed99d0dd4bef981d7605de608b2347e2b608a7647a4a19a87c9997", 0xef}, {&(0x7f0000002880)="676bbcc1faa77badbbd10db6f6bd2e183dd65693718856d1cd0f4d67bf6fa2177ea3e7a37aa46c1303f5ff83d8edf4bff3c7e1fb626981eb5000df7e3e6e6cc6c457dc9ce4b1a951ccea096c0996c8d849539d21ec252df077e1c9a78901b56944ebf2c4fc43e5eca482520b06f0689d538b8db7146ec3", 0x77}, {&(0x7f0000002900)="cb41bf37372b77f674da1802df096880acd3ee17fea914feb7410d8972046a8894ef2d31074d7b8215a6126795f6269b7242577e16f1a502d5f3cca88f6f8219d0c1b9dd952e9cdaec9c7cc4623e5250b079c131720f13f029f5d673e962", 0x5e}, {&(0x7f0000000380)="5ddfa8a1d78f512c33f9ee5e258b49bf3b07421c8d8774d22dc97cd360dfcfcdff123e1fe956e4d48e5ced", 0x2b}, {&(0x7f0000002980)="c8260b8266e08c7b229e20287cf7078e8f9abc41209c65e0ff57d144444bb9e7905ca78f875f70827d438bcefd578fead050aa4af623404c10f1d607a6902ddab4ef9141301afeee4404a6399bd529f7847563b44aba4dd428dee095cc7fd6d0fb70cd96697f6e7e2c0939a3bd009ca2ec0a7b08ebbe40c2d398a466f7029aa9e8717caf9be59b9ec355179d8e10569d32f3d1de88a304c38429332f2b98eb9333ea06f87940f7dd6555a5377b4bfe3ae88eff01bcf8092294daa60b2aea88cf52c3a1a3e6e15c142de129fbbebbd5a720ac6ccce89d2bb5e613187fbf158b6fae688269374b14300c9af7655def8a89cd9ae2aa7bd3080b18fd37d248420ca6072f1344e5f94a805e1b0dbfc562f7d550e2d7d52c467a30da04a0a7c593c3e21ab7bd409021a90e9913b7efe336138ff419c23a5110476c6f17136819ecf0ac61d62e0bd5196b220218993b81f0aad6564d870ab4a8826aaa05fe4db44890fb053b6c21e263f8242abb4f68eb9d4ce61e622f3c3980fd1265d084de0fd00392a16fe269fcabb208a4cffa0ee7e3539a8967b0eb1b62a9f27b603ac847e0dc41a79efc67a660ed5860a616595d1c10cc5ddb7308aee385e3d02951e91c67f0818df495ef695a4b94af4bef15cf403be69a9483d8da1159538808f92bdbc7235654f39b84cb92b22a6d2720a2f2c37f13049d95b47084c69745b2ad5efa541525fc0ff160c06c780be00bc9e061b8c52576c8e8f0da1395246cfa98d22104b54885caa309473b5a6a5ad0da1390285c030e789665e168b1fb3bcd0ca64e09c25c4e2f210556de97bb3e9ce08f3c7accbf7960e86d2abf704ff79175873ff01d73fc62cfedeb4023a409ca2e7b45bcd72095c17c8cbd4843f77cfcff94b4a484dd42c5f1b69ca9037a55f19e82359fbbd4e24cbad88d3df7c2fa7bd7a19e15bd078a1ba8e0061a50eef7229ad59d70d761b70a524722f4341536413be2d833ec0c3d2b72dc871d61b1ed09cd0ee9b90add8c09fd81aeaa1c1f2d54b2e61869ea245717431ebe75b01da89fa6883c3165554926d22327cf553753a0564c3bdd57b3fd0a960ef567622becebe928aaf98efeb3fc11ae59ca8f0ce58717f4cae98717e9186bcfd23627c20695f6578df6acd5f4f1968ca672f1407e734f9a291b970a6c91e1ceb0f699bd9632326a95d8938ff730da9dd85fe9afb9766e29d14821d3ef8da5cd667440ce6b04503aea36c66d55d437fc336571fea8a971f40f089ef2d752020dae6757dd0b33ebe3cbc73479f704ff43c7e41572926859b76f254b1daa11578ff2f960fadb94b6589249ec135512255d888885faf4f5704f1e2e6cdc9c232b35aa1a195fd186a9278025190a6e6c68ab5d852fc78171e7dddfed4bab4c6e72fa2c60b2c0ee276299ca6b04748b07025e8168682b7de367ed6818730cf4468d79831527b6dd6af9b3684baab58e711344f27a4a32553ed406909a7b1bf349eb7a08a45f3e58d49ce63505d021ab6cf046e02b8aafca00c1d11fb04c00c99076621e589c5e679f15425ea82f9ba801455152768dde7043912dbeabfd8f9fe9919b0a506acabb8357d0e1976e989cd77d80e0fc99acc804d7713e9f7f4b38f9dd7f388dd0cbce83bd011c6b0cad6a6eb8e3755f6292ab18da39ec8d2483a9190955215e9f540f72f795323be5c47e927e814f6248588b501cf549afbce9762500119dab2c8ec42271b50bf64e019e18afe97dee12965bd01b5ecb05035bcf60230454610084b81ff41d7c9bc12ef8074700382423ad3cc5c801af87728e8f34e70878d1565f4d18b9045e3f792a16478db06db72b5ef7194cd2e75557e7e0004d9a61532c383c224dbdc09a770725f0ca9a2525c48c920abbb5501f292738ef8baebc9148324f7188fd03840696279bb39e317390f0febeeb501fb65b2ca63e103ab9b5a27ac9596b3b264da9b18bb097ea65995d5051d37721b968af58b008a74fb708bfa042be5b6468ea74743dcf8583f229ce4e3e1e1de61db475783e4b3c69da0e1cf9c5dd836f11801d1bb383b6e1b50b0e58ca7e9bc9de530fd4522460e5f68f31b45ddb8b062c101d12bdad2134760ea9d538361780bdaae82654a0255d50d4cc1dc947b4e625007efb60cfa4eae96ad392ed12d76343c7b86c3f4f973af9981efe41f21e5b4a9b9bc8a0b5917091fecc4a55bd67d733ca1c164d427c38ca8716fce4a140ccf8015fc65348abab1f911badaa23002caa0b46c47697eaf7fad8e6b2b3f4a485205493b52f3b4d0d1624bcc615b65ef0167690fbdcb41436b359296d5bf872549cca6bea9db98202b404e7f7b89e60fbd6a2699cfa772ba08fc4d8b525eeb9ac27898a5bc5a04e877b41b88aa004907a15b5eb3d04b331a4dc8f8735ed53607b8f4c4f1d7a849d8fe068ed8c3c560b421a0f0fbd04451ec0321fd6c9db214e7c614debabaccfa441e1903cf9b8344dc9a5ac5c550c9b2d5ac247da7858f53734ebca5753950d839bbcb3677736a480a0744a8327146a25c64888bee304e5a8099f288c36ffbed1e69d42f1a94f5de8680a078511eda1c62f1bbd8c916dc77272ce82ccba2efd2bfa27dc1d72cdffff0cd2fc5d2f27774d000d1f16d4cd9e417cc76c3a3ecbbe98231b1e8522787cf6530d93e223e91744c6de6d840adecfbbbc3090a1a742696582eedeb72086a7cb59a9f4b14ceaeb54e456e03c231a055b20954ea98e8dc51150c553516ac0e0a309cc51b1c34a504f0a19c37407fb290293ff1c4b12d9b75262176d8086f3d9a48031eb79f65c8bbe564482e2b7e6a892328fc4c09b6d9c3083598f6f279c534307e510a59bb4531f5c49a0307fb81498b5b41a209a24921f1f839095189675dc55e96142959fd1765ea9d9ac2c55b9149220916637aaca4bdad157e18961a0af875daefdde5b5fa4c875cef64e84da631578281a42bf0fd53d3ec592c5c78547301cb7a8215a545b7ccff3fae7b981e6250c50f7bdfecb61366ae0b203e6a501844480d8798d63f891bb3a1cc61597d740efa85b83d87a87d6c4abb7d9c845a6ee874ca6efeabfa22f0905db9cc1c674c35a08ba059596977375728ee6471a32062cdc131f2678bd0c29ac06045f6466c45d6006e1ff985e662fd6898abd591a190a901727c7edee05bc41dadb7f662d404a9dd517afde8e735b2c7a9b5547a368d4f961bb13993cc0483145941656006b91706b6a3c03db9a9d022ad184488eae6ba058244e5636fbaf0bc6836cf7f06ca1387fbd1a3c6156c69766e98360fb2fa2304e6a7cc88a7ef9a821bdabb01d10d4485aa9aeffa18658b2c8ae82d2a309c1d47e26ddec699784183eeabbffb933fa740a3d2edeef1730376a318b3a225a6f8f780b272391aabf29c4b6e98fafa0add0b6d8385f4996d4ace36b24fdffe24875b949249fa9a393513c24a13ab775705307d5ec16b9c90c2778a89bc0d346c0b738e27ce396a4938b465c848997fa73661adfddbe9bd82baece7e8155b874574083eff8445e3cd3b3e0675979154baaab375a912c6fdde4736161834abfd734fce9c00303c2e554975094a1b16839b77d88ef8125e90213999c0575b960ccbc4334b5bb8c0ef45e120925fb86db8dcab6b331dca0b94d692f92ba5d107722571a2fdb48d893a6d9a94e4d9115928bf362ccbc06ad4ce40d69cfbd10eeb8032079e40efdce5ceb26893181c31b885824e16ea3b8fc0cec271a31d4609754a2943d09a90fa43c99f1dd63c0eaa0cd43ebd5c722d673fd6301a0b2265798160c4faaaf1138dc27bf64cafa68458713780b62b77858fadce869261604a9e86bd42c19746129479289bc060f312981e6df97b77537aede190185468f2d01860ddb7a4ce0a742d65057134775e3165996a81cb3c45c6a801a23e88b8da8ad00689c98519a2219345c79e2bf0f2328f70e1ae0ee017e569b773857e27e98afd3b89415ca9dae673e3213ae1a9efc69dc7dbe2cc324334d19f23dcbe79cc77f15a0e61de1de7b1fcaa5758e430a11208b50c2bf2d32deb9d74befd35344a494357e6785551ee055436d941652fde614105949738be42112d869faed515bb5c951c9f3f97c06bcf9eef8bbf8ee9d9ecc5104f6db14fa24e670fa033158c6e620e6cf6f733a4043eb61f1f70b225e5ed674a8ea55aa545e11d9627f712d797d3ae991d54d8a889565c1916100a711d103631b66483657a240195fc2c027379b6c4bdb556f0fc39c5a3f88d92a4afc78bcb027baac312419078b6c2504f6b399e1163cde1dd6fce8fc1423ae7425b02ee36475d9f09f268638d3fd68a15a68abe4fb3eced218d17e61ec3f0bc49e3f032147cd2bfb2faa7b6d03175dc17c9920522250d5feb0b21c77ac56c6f1ab4ff64095614a91553c70a88fa789e8f0a58d5bdf6284bea9ed35e27cbca08623e8e555fc6f35e40d44a0053f45812eb257739f74dd168ca741a0ad20cdc70cf777563ca5df93a9acaee25db33c62eb8aa8faae43735b100aef43fc7917d4ac80a557fcb372c2d140f647f13745ff60dbe06e4c8e77c9643ab8512c6ec58909a3ae3c98c242b5b6bc2d419271adb97b327c71695806b0a452e066477cb3509f24e8223b398ec72b36329a1058a38a7add705311d2bd76655c435cf62e4bd0efff5ff921f48e4741d54f54e3d9fc8dd48b2959174f39a2f2640150ceca5cba6fb08c912dcadbd686474f7f5c7beec55153cb408a2f224877dcd7ec51be5a2aa53760af79e8ca6d88c30d1d9d92cf3e517f54fcf6a931f99b2b7755a404098a49f814cd8569fa4273c02744d059b5148205bc98b90e91840082bcacde3752f39bccafc14f1d3309d9b0db8fb9a05d98afa9bef66cdc8bfd758827cdad0228cba5f59bc885ff06338943e9a91a4868ea27f0243a8d7a1bf718f0204c8a5ecc5c515ec2f57fa6d8eb55485bcb2a9668b2db6459778e61b63b31bd79272f8b2da6a719d048c36d4ee2c49f76c6d7427fe5a9660b09090aa802026b7a1dfb0250afadd83b46c8b9bd1320b9ba543659aebdfd697c9ae2b2cadcd2c96bb415743afd35e55d2dbd33b581d94907416a2d8d1de2a74bf8dd09204be54ae4aabfe555180f4ecc88f1b1e9cf799cf6df78bde35e2158d041c5b5c7e84384ac0a31c040446401ad37616c822298c2b2b029a26daae4b1a3f8c9c337cc5b453f8930106479b2c208dddf87398db4aafd2aaff695147035ec01e3a0f332ba8ccd533b10674f44fe9fff8bcd261d52b1f9cf5c548c11bc4b83f6a8e884c4dc7678cb26d7e8ef0d10d67a37fcb0ff055c90268bd0e0fa0fa9d162695cbd649296e808ebf85d74a952ba951d6df55fe7df9fd6db6ced183050137e8c36c95fecb4e27340ee162c654ebd07bc7bcd7a43f8b36c554101b08b8d4788d43f83214dd90ae7c2fbe3b760aba6145c24688198ff0afd26c32eb62fb257c685c3e359d4b9b04ebd1e7e2d41caca87316cd04b8117e4f403626fcff67fa2dd5aaf284e2cbcf9ec0dc38ed35e8051f23654fd08bd92d88fe32d4e14d08d5bc5879a0f75879912807a865ddc5b7143d0c3a499be14abc49b041fd6b6cd7e02930c02cfb1698c974fe90a213a4bd0e466eaae0d7bf5c8a96ae50b4fb8ce98fa96a8bdc6c248ca079ed465dfd609d0190960a22af88503bb4925dbeb6bf5caa88f88c881b082c2096f5edec47cc7be6b217f9d6696156d26a2a949900c1d68492772a86b6ae80fad4cd90337930ecb18997e936952a2d65dfdbba9d83e1d89884b81d773e56a64453e", 0x1000}], 0xa, &(0x7f0000003a40)=ANY=[@ANYBLOB="1400000000000000000000000200000006000000000000001100000000000000000000000100000005000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414bbac1e00010000000028000000000000000000000007000000000709f04ea5887119d7830b097f0000227f00003100000028000000000000000000000007000000004414998000000002ffffffff0000000900000002000000"], 0xa0}, 0x4000010)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r9=>0x0})
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @broadcast}}}], 0x20}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=@getae={0x1188, 0x1f, 0x2, 0x70bd2b, 0x25dfdbfe, {{@in=@multicast2, 0x4d4, 0x2, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xdd7}, [@tfcpad={0x8, 0x16, 0x1}, @algo_aead={0x104c, 0x12, {{'morus640-generic\x00'}, 0x8000, 0xc0, "30f20331f3bc9d6e15a2f55f8c2f6e9567c43cadff5a0cdce0f279c859d5ec788451660facfd6538e058d6691b15ef375b3796956d905b47b426b89937b32de6b8267894f68a2160fbc5020a0b235df34539f7be793c34e826680d747b3a1120620683352714fa049fa001b7d8a5de5ebc6c3e094aba9252ff30a080fd8a9909bfa58320eb9eb44fbb126cff3a01afe3733fa76c0369a53e62a77f702b7ad282e9544e2c35266c76196f268b938eca5efa375ecca2421a4239171a0f26cf01c4ee80a52fe16449792300e15c9d3aacee8df4e4615d00c21e68f2c0fb06f4871cef5d637f7b260fe6430a3201bb36dabbc9c994706753559eb44b55dc3055e6fe2aad195cca0100115b38ce09adc1f67f925e5642f14875fe94c89f6580805f13b75b467e8c70e9df95e56c968c4eafe630eaa1f45ede4e98b579455e5072ae0281549f9ed6ec86daff10acb654da3431d6301812b7841ad997d30d6ebad30b0d8a66f9a8caab32600466e4fd14a27fcee8143446ce9b0fb414af7168affee55848615d6d5115d0d0b07ac86311222c4481001beeef076161c0e874ba84f42b66951481675c470ae42724539c15f3d057305e73ddbdacd1c265873e492dc920da0092dbc4f5b43e8cdec273818ad684a19bf637baa8d5d1ac38f4b9991476dbd1b8ac8b990e0ba6dc0f4f8293a5256d39e5b8d2acc894e5dd21e61768dcb6d64ec689808271d1c4c55c0d6538f39e3cff8e1841d1198f0d24a4fa8514fd859de0477d51f39826c9160ea2d46f8e750c44b1817c7f49a44760d9e787d5d94ec50c15d6aed82a141c741208c8368ddb32ce5b700be2d54f501d5d981cf2440a986424da620bce54f2307c8c33999e296972d1c713f803d68813527d2f3dd2011a03204f23e04334d3f00deb188d7d9f35418fdef6cbfead5d84f6681400173e09e46af995117910685c26c3f27fdde2e8709f8dd3fba39030304d3598cfd72713335db3939af1b7b07162663f16ee0c27dd473f9c267f88063ebd7e43710c24df44461e1622595d248cbfa5f4f39ac45a4e115f188f02b44a09838ebfad0d77a8568d34e507d2340aff4c4872abf7a615d086255623c48b13fedc761c8c08f4632a7f34482236630930248656234faa732ad52bdeaef35b443208cf9eda641592fca21500f7a5588a8a6a0ce9420bb40a8fd6a946152b80b2d0bf68e4f88c73da5d7c75ccd5e4d660ac552ba1c9b33a8a2ac37a1c5453435287f81bf2b419fd3c20ce1845a069ecb61df8be13bb8c81e74aedc14381be91cc8969534968ff2ca1b7962e7ccdb885875d94a21f68db4b70df15820c4c9593e9ff303431ad52e8ef72d699359da6d5f034973132ad7156f6fc4792f96235016cc520d4ceef15d464703ea5aced3b4f58b7b886e1549338686044620d052abbbee575335f79e7c52aef6393c674d60d99722dd62bd4a1decfd9b50111a2b4a4f670868b92a0741781166361e94cd80217f1c14ff7a7628d95fe21b6eff1f807104225dd1f6b992a7b2bd661c5edba9a3753828b624300d14f77b474c1c98c8a36ac718274c5f9e203d119562bb7e7f0450edd24a1d797c8726875bd46e665f1fa05a6db3f9f4f511bd1a7156eb57a1d5a612acc8a802a2642eea14b978f44b04d8f057f93ed0a528efd219c9a6e96db05de91328ad64432fbfd27a111521c08a2e4f6b195647373b094b9778ddaa088c3668c63cdcfd6bc5bc139ea9138742ee843b2c66f05ae8b5a164c6a723d9609f179b038624c8e4b15f34e3470ab9b98d44f20cd86f8939c1cd25ad97386169217e5a868b23c5bcf35c97d378e6905073ee6a7c6a602fbb4112d8d489c0359651559d6c5a280ac9cf5c955008768d4de40d57004c103cb42d1dc1d37d8484e1d94d0e719d0b92ff4798d8beff0c7a205a3bae2423970bba928dcac9a7c94fd968982f5e32d6b6c0eb289f66f7aef42fbee2184fab0a9cbfbf3f19cbddf7d4a6f211e8bfcfe8f4ac27bf1fc86c46110be4f6231c8a7ef96bc22e403a2433ce8ce3ab89beec29ea215e164a667b2c6ef49abc446762b164a1e907772f477f6287cb4f710977b499ffd9d740ed6cbe01ef30fbc817e17e7cd12dc2ad97f8afb252a4ce101c582fc8796d648d890ec31ce62935bcdfaa062792f02ab22cb01283023f669f23f366144037c31556626091a00914719d91505254b420c63b2d4353ff53cd617da731758f2b158bf87aad204c62a362ea5b4b754100c336e02eec2b82d96f95c5159543b34a3153e2b3d03030c0209034792b87e5ae3dd205163c7d53b77d1910d17da4f8b82dddebd3c3039f406100e8783a283ed2516ebdfbc52f25aedaf717ca1133661f914a88bafd8855bb246fbab6898bac5ee5252c1747efc4712d2ee930ca8c0e534d759c56bcfc61e7bab3a10b4bb80a6e6fbbbd21f99b6345789e9e74ec2dfbd860634b9dbdde822825ad35037ca9abbce44897d8b45fe78543a890cff410d10017e75700eceab72ba516095b38d4e1593f7e473fe820cd340258d57d1e594742d2a4d341e1e31d208ec1a87a4a9d5f49736a9e241c692dd661dabe6a9ebc1810c7bf6f5eb49632839ee9d87df22a3b308fdc331c441dbf540db6e90f243026a045b68dead895b8c7cb6c6e24aecf15806fdefb2b153951bf2aa72b684ee88b4246014aebb68ce13211f973710138f61b80f267ac096964e4eddd6b008303f78b67b177248903132305db432806d55083d174c81d4fdf5192b9960cc64988c34537941428916849f02f5142704c752e9c2e071d659696550a1708e687c20ca332fdc6b35c26195a456dc849a911abdd2af23c41437264d0a410e57d2df818c16accbcb4dde9b044ddb850231fb96fe30f40421b8acf69de52b5640223456a2307a3a5f9739edccb898879cb86e1c0324eb9f1fc42a479ae5ca188495d043a67269a60c75c35fb9a19ae79cc2ce77fe9eace6fa81f01074b00a3bb31f8366b87afbe18db06392a36f510dd50ff26b73041526276a06ddac52f66ff6fc448ef06e895b6415bbcc5327630b8487bcaa39cac08713e9e3fb5e0ae939f90a4f690540ba7797d14cc55dc0857c838a675c404cac247d053501bdc72b8caf0d87bba1f81e7c428a84d80af7232fe1f385e3f2701173cba4095e51fb7093032b025452d4c6a09eae07925d6c61aff8120bff0def4a1abc2788b4bc8254c85925adc77bb7e757ae73ecbc82ff513cb9c06b99477b68fe8d3fccdbe31620c9190ed9bc7b32074eca8c88731519906566f4deb5fc882b360d7e31ef222441826fea7b4dd98a2a2058faa2136a1d409d68bb5f6bfe75b7f22397bbc1d70edc23f39c04db87ff1c2256094f9b832e026ad067add27c4c72e0548c336f66e494de64a6f487dfa02e625b468837b0b43e10f79aa6198388a4333ea6dc4da9ba450ef22d727e2b4646b67cfe33472497f886c0d82cf21c0d3e7da95b1228bb9d9bf30d75ce6ac744a814022a8e918d3a7df26ffafa7913a7f60d2ef4dd19f3fca196e665e10d9716d12622870dd872721a07cb133f91b50ae4ec1b5f459de1ab49376000424a78c46a618d05b7b9e7ede008fbd99203cfb9cf34d88370e1d6ad99b1091d58f8cd9af4aa401755507ae50b35f11ed62ba53d13792423f6edc4b68a1fcee215a8e92b65966ccfe0c6947801c51c0004382088adee349021ef1dab2b9870473dec81aa4082400233bf0fb394de54ef32020c7c043dda0300ed80af84428d05bd4f02f686d1778d7aff27fe6c3096d3c2f7accb3f4d27868d231d7accc2a6c7dd4c8cec2fb0a8010596ef44a1e2d0c0a5701cd72c41376c0fa7f82ed3aca6443fe56d17efcc2d0ceeb5970caa7102ffe1416edc6bd07f09073be383a973efb388eae89d035b23eac031415708251da20f1bd8579de50f05826be25bac14121a7c44d26f827bbd6724a35d6628cdc2c85d839725e9e766c206758013798f15839533fced3512be5d5b7ad8fadd7aa58e014a68df0ec04f4a75a64ceb780e61f37229006bdeb1282bb5545925668232d9e22398334622bdf4849d48e8405aebcac780f008e05c61214ca3ee6ee7e459dbe18567eaa9cec10ddd16d62f7caeed2eabae3514cbceca637715061114eb376cbab9d82e2c934fa87d9c236980db1b11219c82d7eb9848c999f7405e18357e0633dcc243df524864c3dda5cb67957ed59c2c7039fa834a870793d6fa99a3145316bc31dff74358617b549a2cea0f18f787c1e19d3fc6160741b7ef2194a00e95cd0c738cd1420100376aeb8765fa5390203b611f0e1ae4424da603dbe26ced3f0d995210ec2bd7d08fdf40f9593543903224c83f3aeb12f55394affe05e8890ffca9dbf3fb64079c764f777a90c3df869c98613a0530475d22e81967f34322a0852734e558f9116dc897ffa35cc78375235ae70295d42775ad6b8a28f03c337ece9739c03cb9dfd2022351871ff002b1d3af205c94eae5175e58fbe2656eccc45951eb488deff1c0503bcc9031e2cd4c14a3e53ec49963306e1115242e9ddb204a41252fc61f2869b8b6a26cf7887dbcf2b48702c620557b23d29039aabc84b1d7a8a97476d5864a7587425a3d26a8d1a318b2b8b06fd1d360a353065d81e3dbef338c21ea664ca32a5e32bce43a68ece259f9a23d7a44079627ae8d6936bbf8013d138e604686f4ea45d5d68889b12c247ab041dc1a37c58627eceb6a5c3524d1a001330fb9f5193036185972f59c12fae546df4f1f4ec8cdb8a67f9fae66eea274f0ff1f1436cac80543c57c055e9ee45796b6611661351026fd27701e8fe1f8ba7fd0eafb962eea2e7f03b806bfc9b2ca856fd2fb163b4ddb1d2e01c47f04fc3c8e2e1ce4345bbeaa4473f1c6613fed5abccafab51ba714aa60331363bbaf6facd72c60828de8cdb7fa567f1a67a3a03b4a058b2741750da7248a5050635e41599f30d1882d3391fa020de798ea305f0dbd74424138fe607c9957467593638b7c46df4b00174e6f840cd4e178930477710a77b9332fe59b6bbd4bf262419bc8a59dd9f586de07e53bf31622e80b582571760d11aace8d87c0406e7a9cddc7e85559a885357bb3192054d6fb8353bce5b23e41fa25c036d12058acfa808b6a1f6d721822511f8632b93f0c7af23e872a0394fe1903578470cce0263269446b37366883e238e6f1155120575db3aec105c0fab9bcfdf1e9c29a2c85ec4216bc728ebe80d3d9978d8bc456adf2e14b1b9d5e76935f63415743d71237b71366e666213f15c40b23e43e144ebdfa97d8df0a57af6c0088f83a5457e0eb92b398363adafb87bf6bfa44985e2f447b5301370d62b6341ab69f8b8c8ddc687bb45c43814b554a64340288392d0dca3a13c1a70671ba0b78af30866085a83b71bd99de459ca0d197e29de89c3ed7b4d46f1e335050a763f94b0102da75749ed2a799e301cee5ede298f54315ca1a7d95236e80e09b0e0a175608dc566d27b158de5e42f072d328a747c9eb9504dd3ce7626c6ec3180faf926658b5ade147a84236eb3fc43d92f445a0f741ca46a369afe39669e5e878459e19fd6c18013c8bb492d8806207f40973b2172220daf39e7a885410a1b86d0da021a165453244f55b58d0ee908d5d96a8962d0a5d879d8e3d15b24b3dfdd8a02c2541340b3c3cbfdc8a78d19a8a279a6896b7e269d35b99f1517c4a00bf4ace82d5a74720b58d3109fa58fe739c91d2184f125d36d000ce2eddf3499e3e1550007fdb16339a61212ef5c33154de9d1b8e06"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfc}, @sec_ctx={0xd9, 0x8, {0xd5, 0x8, 0x1, 0x72, 0xcd, "608df08079eb267f93fcdd835c36bcd8f8f0be42282e1a9656c0af2161f22886f9fd277b590a2fa478606241092aebe2d5b4fbe98d5cd72d65565250cf9e28fe351361f10535706e3df1a1f86a914d8e10b03b4aa39e132e7f010ab41e058cab7fbf3f91fd7a1acd178d6cd8380e084fbe32a048ee2f33e8e9437887ed1f06f2747e13d18f5ebfa7d41f853ebfe89adffaf2248c779a001a9ed73eadcff88280ea82a681bad8131656862b9399728b4b7e919444e4975980797c965847db070deed8bf401ea71a63320b76637f"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @proto={0x5, 0x19, 0x6c}]}, 0x1188}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000)

[ 2795.566213] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2073 sclass=netlink_xfrm_socket pid=13286 comm=syz-executor.3
13:57:51 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101242, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

[ 2795.626367] loop6: detected capacity change from 0 to 262144
13:57:51 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

[ 2795.635141] loop4: detected capacity change from 0 to 40
[ 2795.639472] loop2: detected capacity change from 0 to 40
[ 2795.656033] FAT-fs (loop4): bogus number of FAT sectors
[ 2795.656610] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2795.674472] syz-executor.2: attempt to access beyond end of device
[ 2795.674472] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2795.676290] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2795.681468] FAT-fs (loop6): bogus number of reserved sectors
[ 2795.681914] FAT-fs (loop6): Can't find a valid FAT filesystem
13:57:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2795.792414] loop5: detected capacity change from 0 to 40
13:57:51 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 7)

13:57:51 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0f0000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2795.880005] loop4: detected capacity change from 0 to 40
[ 2795.914155] loop2: detected capacity change from 0 to 40
[ 2795.926337] FAT-fs (loop4): bogus number of FAT sectors
[ 2795.927130] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2795.960641] syz-executor.2: attempt to access beyond end of device
[ 2795.960641] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2795.961564] Buffer I/O error on dev loop2, logical block 10, lost async page write
13:57:52 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:57:52 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8)

[ 2796.113133] loop2: detected capacity change from 0 to 40
13:57:52 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101242, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

[ 2796.202861] syz-executor.2: attempt to access beyond end of device
[ 2796.202861] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2796.203986] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2796.346532] loop5: detected capacity change from 0 to 40
[ 2796.475958] loop6: detected capacity change from 0 to 262144
[ 2796.477953] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value
13:58:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9)

13:58:08 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:58:08 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="100000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:58:08 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
ioctl$CDROM_GET_CAPABILITY(r1, 0x5331)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:58:08 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

13:58:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

13:58:08 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
preadv2(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000340)=""/133, 0x85}], 0x2, 0x3, 0x5, 0x1f)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r2, r1, 0x0, 0xfffffdef)

13:58:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2812.707050] loop6: detected capacity change from 0 to 40
[ 2812.708781] loop5: detected capacity change from 0 to 40
[ 2812.754107] loop3: detected capacity change from 0 to 262144
[ 2812.764937] loop2: detected capacity change from 0 to 40
[ 2812.766560] loop4: detected capacity change from 0 to 40
[ 2812.809704] syz-executor.6: attempt to access beyond end of device
[ 2812.809704] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2812.811387] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2812.865592] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2073 sclass=netlink_xfrm_socket pid=13343 comm=syz-executor.3
[ 2812.882634] syz-executor.2: attempt to access beyond end of device
[ 2812.882634] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2812.884770] Buffer I/O error on dev loop2, logical block 10, lost async page write
13:58:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

13:58:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

13:58:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:58:09 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2804}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:58:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10)

[ 2813.139155] loop5: detected capacity change from 0 to 40
[ 2813.236722] loop2: detected capacity change from 0 to 40
[ 2813.315514] loop4: detected capacity change from 0 to 40
13:58:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

[ 2813.326831] loop6: detected capacity change from 0 to 40
13:58:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

[ 2813.405707] syz-executor.2: attempt to access beyond end of device
[ 2813.405707] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2813.407540] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2813.506776] loop5: detected capacity change from 0 to 40
13:58:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2813.557045] syz-executor.6: attempt to access beyond end of device
[ 2813.557045] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2813.558733] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:58:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11)

[ 2813.758412] loop4: detected capacity change from 0 to 40
[ 2813.837965] loop2: detected capacity change from 0 to 40
[ 2813.878543] syz-executor.2: attempt to access beyond end of device
[ 2813.878543] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2813.880166] Buffer I/O error on dev loop2, logical block 10, lost async page write
13:58:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12)

[ 2834.370876] loop4: detected capacity change from 0 to 40
13:58:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

13:58:30 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

13:58:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1a0000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:58:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:58:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0xa00410, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r0)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x20001, 0xa0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x503100, 0x79)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r2, r1, 0x0, 0xfffffdef)

13:58:30 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
unlinkat(r3, &(0x7f00000000c0)='./file0\x00', 0x200)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x488000, 0x8)

13:58:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2834.443179] loop2: detected capacity change from 0 to 40
[ 2834.468066] loop5: detected capacity change from 0 to 40
[ 2834.490409] loop3: detected capacity change from 0 to 262144
[ 2834.496586] loop6: detected capacity change from 0 to 40
13:58:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:58:30 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

[ 2834.585135] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2073 sclass=netlink_xfrm_socket pid=13399 comm=syz-executor.3
[ 2834.586189] syz-executor.2: attempt to access beyond end of device
[ 2834.586189] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2834.587949] Buffer I/O error on dev loop2, logical block 10, lost async page write
13:58:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

[ 2834.671911] syz-executor.6: attempt to access beyond end of device
[ 2834.671911] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2834.673167] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:58:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 13)

[ 2834.749633] loop4: detected capacity change from 0 to 40
[ 2834.768629] loop5: detected capacity change from 0 to 40
13:58:31 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:58:31 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

[ 2834.937690] loop2: detected capacity change from 0 to 40
13:58:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

13:58:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:58:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x40000000000400, 0x5, &(0x7f0000001340)=[{&(0x7f0000000240)="a5f433cd0823ee00fa3ec13d1909715ddca2a425fe722967cf3d53d0dc3c583acc36d16b39497efd2044d05e41258a1c5f9d8f355ae7d26c9c0076c542773d731d7178985982f2bf423279b2765d9e0c0ef3ac83df98d8f52deb1b3518b64e9abbf47683d2094bc5306f8f7068bb130b2863acbae5349de85c10ae80aa70988f4e9bca9e9eec276fc02741bd7b426718b5b700d694e5ed280fb9", 0x9a, 0x1}, {&(0x7f0000000180)="82a960dffd71bb8527dca234e83a6a2a55584d4b188509bac9bdd787d94d7d9bb952e0f700", 0x25, 0x5}, {&(0x7f0000000300)="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", 0x1000, 0x2}, {&(0x7f00000001c0)="c75357c8a7fc04565b", 0x9, 0x1}, {&(0x7f0000001300)="1ad9b94cada47683", 0x8, 0x200}], 0x2, &(0x7f00000013c0)={[{@huge_within_size}, {@gid={'gid', 0x3d, 0xee01}}], [{@smackfsroot={'smackfsroot', 0x3d, '*-'}}, {@dont_measure}, {@uid_lt}, {@seclabel}]})
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000001480)={<r4=>r3, 0x5, 0xffffffffffff8000, 0x91})
openat(r4, &(0x7f00000014c0)='./file0\x00', 0x80, 0x21)
openat(r3, &(0x7f0000001440)='./file1\x00', 0x400200, 0x108)

[ 2835.005162] FAULT_INJECTION: forcing a failure.
[ 2835.005162] name failslab, interval 1, probability 0, space 0, times 0
[ 2835.006213] CPU: 0 PID: 13413 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2835.006862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2835.007435] Call Trace:
[ 2835.007624]  <TASK>
[ 2835.007800]  dump_stack_lvl+0x8f/0xb7
[ 2835.008089]  should_fail_ex.cold+0x5/0xa
[ 2835.008407]  should_failslab+0x9/0x20
[ 2835.008692]  __kmem_cache_alloc_node+0x5b/0x400
[ 2835.009050]  ? iter_file_splice_write+0x169/0xcb0
[ 2835.009408]  ? iter_file_splice_write+0x169/0xcb0
[ 2835.009760]  __kmalloc+0x46/0xc0
[ 2835.010026]  iter_file_splice_write+0x169/0xcb0
[ 2835.010369]  ? generic_file_read_iter+0x330/0x550
[ 2835.010740]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2835.011112]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2835.011492]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2835.011879]  ? preempt_schedule_common+0x59/0xc0
[ 2835.012241]  ? inode_security+0x105/0x140
[ 2835.012562]  ? security_file_permission+0xb5/0xe0
[ 2835.012929]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2835.013342]  direct_splice_actor+0x113/0x180
[ 2835.013690]  splice_direct_to_actor+0x33a/0x8c0
[ 2835.014068]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2835.014462]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2835.014864]  ? security_file_permission+0xb5/0xe0
[ 2835.015251]  do_splice_direct+0x1bc/0x290
[ 2835.015583]  ? __pfx_do_splice_direct+0x10/0x10
[ 2835.015962]  ? lock_is_held_type+0xdb/0x130
[ 2835.016310]  do_sendfile+0xb1d/0x1280
[ 2835.016627]  ? __pfx_do_sendfile+0x10/0x10
[ 2835.016974]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2835.017362]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2835.017787]  __x64_sys_sendfile64+0x248/0x2a0
[ 2835.018136]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2835.018519]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2835.018914]  do_syscall_64+0x3f/0x90
[ 2835.019195]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2835.019584] RIP: 0033:0x7f61b5a02b19
[ 2835.019881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2835.021191] RSP: 002b:00007f61b2f78188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2835.021751] RAX: ffffffffffffffda RBX: 00007f61b5b15f60 RCX: 00007f61b5a02b19
[ 2835.022280] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2835.022804] RBP: 00007f61b2f781d0 R08: 0000000000000000 R09: 0000000000000000
[ 2835.023327] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2835.023863] R13: 00007ffdbc84f80f R14: 00007f61b2f78300 R15: 0000000000022000
[ 2835.024421]  </TASK>
[ 2835.056572] loop4: detected capacity change from 0 to 40
[ 2835.081302] loop5: detected capacity change from 0 to 40
13:58:31 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

[ 2835.154335] loop6: detected capacity change from 0 to 40
13:58:31 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="002000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2835.285022] syz-executor.6: attempt to access beyond end of device
[ 2835.285022] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2835.286082] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:58:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2835.341524] loop4: detected capacity change from 0 to 40
[ 2835.348112] syz-executor.6: attempt to access beyond end of device
[ 2835.348112] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2835.349299] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:58:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)

13:58:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:58:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:58:48 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000002c0)=""/134, &(0x7f0000000000)=0x86)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
fcntl$setsig(r3, 0xa, 0x1b)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r5)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1)
sendmsg$FOU_CMD_ADD(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

13:58:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x40000000000400, 0x5, &(0x7f0000001340)=[{&(0x7f0000000240)="a5f433cd0823ee00fa3ec13d1909715ddca2a425fe722967cf3d53d0dc3c583acc36d16b39497efd2044d05e41258a1c5f9d8f355ae7d26c9c0076c542773d731d7178985982f2bf423279b2765d9e0c0ef3ac83df98d8f52deb1b3518b64e9abbf47683d2094bc5306f8f7068bb130b2863acbae5349de85c10ae80aa70988f4e9bca9e9eec276fc02741bd7b426718b5b700d694e5ed280fb9", 0x9a, 0x1}, {&(0x7f0000000180)="82a960dffd71bb8527dca234e83a6a2a55584d4b188509bac9bdd787d94d7d9bb952e0f700", 0x25, 0x5}, {&(0x7f0000000300)="faf53e0ad8e3d1633947d903419db47d2f08178eaaffbf4b7070f2bbe237ac44fc9bb1d6ad7e73e0bf33ee4c4fba34b90460eaff81fd070ec1f45a7292c1f01489c318c6415cc49091d86e16382dfa8841bc89ddf29755862d23450114783704abe803060212b0748980326b2152a0d151cdbc66291443e52dd34de6ae917f8f1dcfc43e034891520495cd6aaf1d59e43f5b47d608a152474dc75badb803c498a18854f92325b11eca9dd43563ca2763618313fcc4ecf2dc8bf9dde530a060e6289f76b9b1f04f2ba4dda40584499dca970a999e5609611bfe636bf99618dbffd9aa8f8a3f457ca8c185f1c04149b39a9304e6b9fc36ad4b7f67717d150c53d1fcf0760f033ec1d4f5b61fc3aa285cf2892398638e14247689a95ad3ee265a4a84f4936b1b9e45664a37df2ffe52c453197a26d46a6ddf1dfd12ea3f93455460f0c64546f7c9f40b7a9949b8f85568d7b935ebb53d961727f950d44d42ed6646ebf2ed0a81e99fcade05e82ae30f8b183b37a6b6d25d577b0d73672636df77592e4dca0248e6ef4bca1d697282957e8aacb774b871d050b54104900b2bec3663559d38ea7b2d9fc470b597980088e000f1dc548bca8f5efb9dc7bd1906c10c4cee7de3b18bf946d9aef795de5cf5e2d8239cbce7324a4ad11e6320d67e37bffb68a3188d4ad9e9faf4f3915714cc31924e73668401c31886f486b56050b2b26eae9f2c4a65b61ce1e967c3812c95b7c4698c3f11daa1ddadfb6477470567a49e5aa1d9506465a90964b2b813f11edcbe98431a15157b7e42d705bc070ba186ad8d84a57c2db8b8f7a206ccb3fd6bcc2eae6d61fe99d7c1f5b819ecaef5c53362ccf840c3990ff9516ed35415eaf66a954f038098094035103bd0c1ca618f5388b3ed0e5334463d16aefcbfb6e06b987bb9194c4c0050f5b03f258ffb3472aa084ec57eb6153561e18eaf1ac9382574781fdf7a2a82d1b4cce8b5b7ac11388d8be8f4e2569d7b03e77bcf33df6ba7925d1aaae30cc6cfdf73adfcde4470dc8500a8e7dac02fc39c4e67ebcecff4d81bff57b07a212e9c2137c24fa14a5ad865d21aa26d89a9b2e2e223c9bc192b771513f2c19bf0365793a8dbc74df3218c7be064df45f00229cd828a9f69fb90a3323ba8f3402f59c680a76dcfab4f2ccc1eb56928ce595b92243fc7c9c6fe51be3b1ab1743da2b3da03385f1383e1bf513cc91f247d643d5aabb6acd8dd97d751b8bc86655bced8bd8583fac9a6433b4541ef89e26e9b364fa77f471a00c01c26e26d03dac278c114643a28983c53fc35cb8842ff5f4315f55b6f4988dd88519c4a643e397bbc4d2d5d5a3262fc5cb69e6c606a0de9fc14229b92d2d0e09abc9c50c9c38fabb5b3f4f6115be3f569bee300c1aae5ac2cf2b51aa990166f60d9ee6631b71da04b917f79de52f8f6fabc2b3b719c8f9af54fcd6192ec59e8a2d33bd956ae6f2d371908ad7fa9e1e2c2da38c40390d57327ea7d31429f70a5a9e903659e7c21c6773a4cfbece6aa76e832509e9adfc1808a0942c0759bfe26c01c5e5e6c29cfaccf1d731818c67d2a16b1032de9badebea358cfbced9f2295af767715a6555e3657061a07a71b231fe2ff7bf0125e5fb5bf3382c7e935b3dc97611804da32a4f88416b4917f8504210b61a3d36ff2a857f0307a0c0741f54b39bec96479f6a4fef91bd6ea14883637d34e84fe175c7efd14cb467ecb2e8777e7532134bb63eba5f33d4932d763949a422a102504b6d1e3e0fbf10ba50d1a9ad6d4575fbadaf731ac7ce76659ce2012a3d384f6b4f736d3b681f261078d6dc12f2030a35b5117ba1dc6039a4948a405f9da60c6c24a90c6cbb31cf0294edcc14e696d95dfae74e239f6c9f1de3f7db415856e040d8656e1f63bd79a63d8b47a6ac14e4ff64b59e2af272a7983c53c4881998130790f97595682ff553ce28296568dc71620ab56cff5fbec7797b4ec16b63cf2577a869a4e3881d49c9247841fb08531b698059e8e0f86b42a34b9e102096480ce6e0200fd53163bf459484b0373ca9dbe85e3304a0aca34b26b1ac4d70b8afa92839d73093c53c78c97ed65cd0f250641857cb84cd6d250ca7894d5cab32d9510be9ed287dc42e5c979f16354b7680c7e29de7949a4f4602b333d496d960c9fdfa1b93a3a46a1d857b0e2aca9633f1de934ee72f220e3de4d93698ac978ce8c910d683a13ce3f62966c1a283fc1962b298951f5467ac0aa2e4b0d44468031692f40c45ba0d5ef107381f4aede8e04eca0bb2a27a27275b5b5ec5bcfaf3695fcbfec85e64f317c88bc66dcadde1cbd72d7dee83cce735e2f7efe1ec545718e51cba7f61f7db9732c2e17085a96ffbaa191d49b4d1289847cc0833dbd6d520024cc9659862998524629c533e0a11f67c2ecf83dafd01bc62e53bad67261b476f8877863a2d4a3da8721518db0744e83a0a1e7e1d3ca0f575b6ea7bb0c48cc8a1518a0e432788058993a002b716c2ccc326f436297579d91d4644e7e136fb65a3b7c70d135697a1e00676c2989832c5f7019d646b833561c8cede0e6197ff7e83e3446b2eb87bd6761a97b1ae1721d990248f5f80e2e51187139f901b56a69d2bc2fe05b34d6426bcb4f3b65a71a1bd791230937f6071dbd556a41a20752b113faa097f2fdde2364d6bc43591dfecf67385710033f03163516d2040be2a7b97c8435226fae07828f4f59cddbdf13aede2331791cd8587383640a6e95bd701c6ebeaf172a7c434e601fdf9837b7282ea0501a17ef3c3550c2cbcaee027b623aa0983cfb8f9705521a1c6a363d6dc8ee7c8c1833ce3298cf90521ed63ea466b140db1a2782300c4be3f3edb52cdabdcefd41ae1e3e7342fe3483cdf3e12e7bd1ac9aa072445feb6dd8852dac9a8186395318c060a11c4034aed06b823100950d26f1f3b6494ff4871da924da46b429a4fe2ac3b1ffffc1590e31d93e50e595a0b2aac0e6c87feb7136e1ea2b5d556cd37650e50e59a4d9caa297ff8d84d33d26bab733dd44723ca9f614064dee4c6b91cffd2f8e09e41ec101b16a26ce2395cd5cf846c04b160d4278cc83ec2d4aa43ee5a50e8618b528c72cbd9a6611226045180d63f6d4bdad4784f6e6ff1c734b74080e7ad93fcdefb803160b3b67e7edbe2b603ca0fd3f6eb2d87f32a69ce1981fad777624385e0a6482991b89fb82de564047340e524beb0bfcbf6a2730d5a32153d1afb67495b990c8a4762a739a2cbef2c9d808a5680b94455e4800d3834de3939992de21147ab29c2c40041ffb36fc31da91240275c01bbbd022f932a64e19aec7d9d48a145f4be38c51dfe68e80b4ba17caa8e477801af2493105b0bd1261d322ed227e1f1d7c459a30693ecc0cc70ff3c0b744c31ff7cb0904281607ff9c96d38d799678c85936e3f5ed666d4354d00443e27a90a28522ab2d850841412fcfa5ee3fcf7a6726b3b2c684a198b476fa158669bbeef794937bf9000e2c3d37d73c179becdcda6a9def3789076e255f6fa9a56cd71df0548fc05a655966b755f7837140df0155a4c9aa843d89449b14a3e39ae6d340e09ab3db66f6680e31bd7a71c150e6aabf6e70072dffe4a0f111df02e9da32b7e31aafa83daee29bc9cd0e0de1c744dbb8ce600f4c4b7c36beee7bd0952276276695ce07637d71e8eab289490d5f569a45516ddaa6609d98588ff4c9ef5b059660433fd1427ebaa45d7df56835091b2676b49dc03c13342b8ebefc73943182698df6027247caeac5065fdfd05362d385f7cdc8368b3528ac15268e8a8ad7c98affe6035abd3ba19012417e93b542e23ceab0b7fcea7d6a9ee2f4d9908cb6bfbaeb9e079edd23da0e6b2bc6df23df0e94b8992b92087ed34b52f8ef0a1a5b0d2986d17fa33c25d57200f45c9f38af50f6dff206f9e72889ef33144e3d44bd56ed43ce704d97b1882d8280bab169b29bfc080c584d427818c95449cbde68960e94f1446456064a733015fa205adc28a72270e731bbe4a496cf5af42d4baddf07b38e914d92b6e92c14556c65f2f4cd80808be82ee9905e004f3f2af9be585fab42a64110d701d73541b9ab60a37f63f0bf2629e7b6fbb518e7625047ce70db7126babc12e6c11096820e22588f52b545fd1b2923427766c520c2373971f455d894a0b29eea30bddc77c5c4ee675f14eb28d6e3725439a4ca2144cc59483b99ba6257ddf9e8029a3b7c00b516c6b20ad6dc36303838071cf0e6d57a1e879668a22d8c84a32fba1f86d2e8e9cc7c83b0d3d583bcb47490a39319c6d0f9a081b340f37c029d337fef6acb1e03b93c7d1337be13f78037d2394a3da47d95401a25a093909b88514e50a456012b86e2795472e9ff8f339cdf0db8988f85a4c5c6b4469776ffa88b213d0b4d2551789e8b8de05c57573cd2d03f2dc729f84fffd8c80e601b3fc495dff96d310db99cbb0f3f0a6bb116483ed7e578275399ae497db21ad4d9d6d12465dd51e1b4705d2895b4b62af41acc5f323e4655708af2eeb1c8dcac92e93086c0e84eb0d34c8147d04af01ee60d8c444acd563406b98eddc364aa4c6b16b4b5d2f348279f3a348e5257c03116f59d36fb37c5c93bfc29abf8357363d338a37f02f2e1f646b54a72e96aed9afb54ba2e65e3cb9cf9777456544d3bd3bc861671b03133a65b4464aee264ef2aa333fe87b1e98e4cbff89345f33ccd235c1a965d5bad47b5686a5cb92028ba592dbb2d91d0219cf74ef035a03e867df8ba7e3270c2b480b98dec24dd7417aa25897cf98fb3aa2d3e61738fbc5ce27a242ac8a5d483586db047e3aab9b274c4166d738d070ef8c2c17bd89704511dd3fcaf166d4f884a168d2273f38a7224d48abc0b91b6c9fbadacd6e2bc0b079c6744bc42ad83485e539cc1d67de7bc31496894c1d2c1e4c0388ddbcc0adaa77c8d975ff6e58d1c800e10e0675d0d40b323d17552ccb06bebdbaa78e608a46ac47e7aee29db5f4792b9d4ec948b7b603d328f8cf77b1ae6c813a32e80263fc7c2ff8d4c993eebec425b9160e7ded36b407512b72fdb50157a527772b48da0489dc646079d1c0121ec668e01d6bf4550c919045495539d794b931d3087f2f321c35647ddd0ebe8b056f485e01a6db951125c00b56ef2c21356ce468a868ca690b40a262727af787f1d754c411aaf0ccf93a18d1baaff770dce95112edd23c4de520755b2f5c5db58b24ec3ed01bb1059c406d38be3b24c5d41e2a613c638ba3eb8bc4b8a6496b2f4d448d3fd4e814798e8f9bf9cf9147dc276267c9410d655afca9264a85957b2ba52f1454777871a19b1e73eaea834bc7394a762aa8eb0dac05a88fda74777328ebccc8f1bd50f9e5920ef7395ba880d9d8ee7295ede823d433de9c578bd7e3b033579e6efafc7f789b8e0e59bd9de89b84376614aeec4a238158ce0286be4ae435ea2f2b1a742e0f708cedd3ba5d41838e7b6a18a2a81b77ac32ced3df71556905b42dad27af9dc5e0f5d519b98fe50cb7cf2edfc5471c1068ce61887cbdfa3f447fc298bee356f0a80dfae5926af60620d6a3544d460a2489db6fda8b1085a245483fe7c8a9644ed99ab3410df8796fdf4aa9db323a1f997d6bcc051bd547501ddfa709237a4add1e8de46c783f44a5d2113aa468c0add29120c238741cd98d630276e603ec988c974e0ffd8356066ab7d136d1ddf7cd837edad97541bf7bd068922cad59d1823ff95e5440839fd412d3b69a372d7e1173ac165abb5423dd16cf12aa9ffdcc63e6e8da67e874b7f62fb3bc354b3fa896f7317", 0x1000, 0x2}, {&(0x7f00000001c0)="c75357c8a7fc04565b", 0x9, 0x1}, {&(0x7f0000001300)="1ad9b94cada47683", 0x8, 0x200}], 0x2, &(0x7f00000013c0)={[{@huge_within_size}, {@gid={'gid', 0x3d, 0xee01}}], [{@smackfsroot={'smackfsroot', 0x3d, '*-'}}, {@dont_measure}, {@uid_lt}, {@seclabel}]})
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000001480)={<r4=>r3, 0x5, 0xffffffffffff8000, 0x91})
openat(r4, &(0x7f00000014c0)='./file0\x00', 0x80, 0x21)
openat(r3, &(0x7f0000001440)='./file1\x00', 0x400200, 0x108)

13:58:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 14)

13:58:48 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

13:58:48 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="085e762a1a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2852.274235] loop3: detected capacity change from 0 to 262144
[ 2852.277020] loop6: detected capacity change from 0 to 40
[ 2852.288624] loop2: detected capacity change from 0 to 40
[ 2852.292034] loop5: detected capacity change from 0 to 40
[ 2852.328051] syz-executor.2: attempt to access beyond end of device
[ 2852.328051] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2852.329099] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2852.337394] syz-executor.5: attempt to access beyond end of device
[ 2852.337394] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2852.338374] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2852.343872] loop4: detected capacity change from 0 to 40
[ 2852.361958] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2073 sclass=netlink_xfrm_socket pid=13449 comm=syz-executor.3
13:58:48 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

[ 2852.460218] syz-executor.6: attempt to access beyond end of device
[ 2852.460218] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2852.462450] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:58:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 15)

13:58:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:58:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

13:58:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000340)="04332dd9000000646f7366d8a001000000000000000000000000a9adac4f7e985500c91ad0c87e7402eaa83b7bb5466822344c6c82e8f0d61c83448b6d929e9c38d3acefb8e011e5705e9e76ad1a84e9fa2184ef443a7455aad25b82b29f21c3647a112f2db760b890", 0x69, 0x4000000000000000}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
setxattr$incfs_metadata(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000240)="5fb3eef74e0ab9c34f5c8aa85d13", 0xe, 0x1)
getdents64(r2, &(0x7f00000002c0)=""/105, 0x69)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2852.701976] loop2: detected capacity change from 0 to 40
[ 2852.718373] loop5: detected capacity change from 0 to 4096
[ 2852.724899] FAT-fs (loop5): bogus number of reserved sectors
[ 2852.725797] FAT-fs (loop5): Can't find a valid FAT filesystem
13:58:48 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f00000002c0)={0x0, 0xfb, 0xfc, 0x3, 0x9, "e3f81e71664ae722ae33591a8d060882", "79b24f1d2778225a77c1bbb874c9b8dfd6339904a98dbfe95335bde4580a634531d57b8189810e1d834e8d305ca391354e8e53e537bc1a37af023a8b2337a6336e2608621dca923cf7ac150d3e0b91f1cbc6bd850feaac73149366326542082bfe6be71e433e82db177d2e9c73b9bf943c83ecca43d6bb8e25b0f2a73e72c48b3f1fc9a1963b170e8f087d5a18d63989a959565d346849c101404a64fa6af06df23700f1f4ceb3cd5bcc7775e1302888dfe90c71aa1bb7b867cd98a0bd0bb0b774f6a99ee0a49d367332d5760b69d3c3f49cc31d227ecfc802fe61bfcb635aa68ea5d4b9dd94f8"}, 0xfc, 0x1)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2852.756841] loop4: detected capacity change from 0 to 40
[ 2852.877602] syz-executor.2: attempt to access beyond end of device
[ 2852.877602] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2852.879799] Buffer I/O error on dev loop2, logical block 10, lost async page write
13:58:49 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

[ 2852.914838] loop3: detected capacity change from 0 to 262144
[ 2853.001719] loop6: detected capacity change from 0 to 40
[ 2853.009217] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2073 sclass=netlink_xfrm_socket pid=13473 comm=syz-executor.3
13:58:49 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 16)

13:58:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2853.259798] syz-executor.6: attempt to access beyond end of device
[ 2853.259798] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2853.261824] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2853.302521] loop4: detected capacity change from 0 to 40
[ 2853.321222] loop2: detected capacity change from 0 to 40
[ 2853.366801] syz-executor.6: attempt to access beyond end of device
[ 2853.366801] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2853.368553] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2853.459214] syz-executor.2: attempt to access beyond end of device
[ 2853.459214] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2853.460886] Buffer I/O error on dev loop2, logical block 10, lost async page write
13:59:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 17)

13:59:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 1)

13:59:04 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0)

13:59:04 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000f00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:59:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2868.775339] loop4: detected capacity change from 0 to 40
[ 2868.786691] loop6: detected capacity change from 0 to 40
[ 2868.789464] loop2: detected capacity change from 0 to 40
[ 2868.800156] loop5: detected capacity change from 0 to 40
13:59:04 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

13:59:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2868.834778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=13505 comm=syz-executor.7
[ 2868.840411] syz-executor.6: attempt to access beyond end of device
[ 2868.840411] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2868.842120] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2868.844528] syz-executor.2: attempt to access beyond end of device
[ 2868.844528] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2868.846370] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2868.850538] loop3: detected capacity change from 0 to 262144
[ 2868.851997] FAULT_INJECTION: forcing a failure.
[ 2868.851997] name failslab, interval 1, probability 0, space 0, times 0
[ 2868.853573] CPU: 1 PID: 13501 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2868.854686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2868.855822] Call Trace:
[ 2868.856203]  <TASK>
[ 2868.856540]  dump_stack_lvl+0x8f/0xb7
[ 2868.857125]  should_fail_ex.cold+0x5/0xa
[ 2868.857747]  ? getname_flags.part.0+0x50/0x4f0
[ 2868.858447]  should_failslab+0x9/0x20
[ 2868.859025]  kmem_cache_alloc+0x5a/0x410
[ 2868.859629]  ? __pfx_lock_release+0x10/0x10
[ 2868.860280]  getname_flags.part.0+0x50/0x4f0
[ 2868.860948]  getname+0x92/0xe0
[ 2868.861456]  do_sys_openat2+0xf9/0x4c0
[ 2868.862059]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2868.862744]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2868.863493]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2868.864314]  __x64_sys_openat+0x143/0x200
[ 2868.864947]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2868.865153] syz-executor.6: attempt to access beyond end of device
[ 2868.865153] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2868.865642]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2868.865705]  do_syscall_64+0x3f/0x90
[ 2868.867346] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2868.867985]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2868.870418] RIP: 0033:0x7fb98db01b19
[ 2868.870973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2868.873608] RSP: 002b:00007fb98b077188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2868.874710] RAX: ffffffffffffffda RBX: 00007fb98dc14f60 RCX: 00007fb98db01b19
[ 2868.875746] RDX: 00000000000026e1 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 2868.876824] RBP: 00007fb98b0771d0 R08: 0000000000000000 R09: 0000000000000000
[ 2868.877875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2868.878899] R13: 00007fff953514af R14: 00007fb98b077300 R15: 0000000000022000
[ 2868.879994]  </TASK>
13:59:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x5}}, './file1\x00'})
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x8800, 0x29)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e0, 0x32)
syncfs(r5)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2868.924791] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2073 sclass=netlink_xfrm_socket pid=13508 comm=syz-executor.3
[ 2869.662041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=13510 comm=syz-executor.7
13:59:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 18)

13:59:22 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

13:59:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:59:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 2)

13:59:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
socket$nl_xfrm(0x10, 0x3, 0x6)

13:59:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x1, 0x3, &(0x7f00000003c0)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f00000002c0)="c9164fff472e692befea1ceacb32295523c7096774022b0d41b8fddd1c8457dfe3c847b44051bfc72635ab3d3ee2146a5aad54bd4f268ab8ef1eddda3728c161ea40db33bf99dcdf543474a284cf96677e33d94279009476119a773be758bd09390d097004515bfd58240bddd5ed6f91b8e86d3095f28ed6005bea4e168ab8cc76380992a8b4935038d3a472d89904fb99feb226970fd08d1074eafd39e8611b65faabb78e96def31ee551d0a115305a44422f75720300790c278443275b2dd6739520667d0d0666b0e2d2", 0xcb, 0x7}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="007a00000000000000000000d6a31d6bfcb448000000000000000000007f8c000100000000000000000000470000000a000000000000e46160240434ce9b7f98ea1ec00d4883fafb12000a6a309fadaeb3368b4a22a57f3af016dc94ff719ab8dcc2806425487a951f7aecba6eb8df5d3b8d1877b20990107e30e563c3125d2bd4f8fd2c3c8d41a206a5ed1d61b437d1454399c2dd9770807273"], 0xb8}}, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', &(0x7f0000000580)={0x101000, 0x3}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x10000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(r5, &(0x7f0000000240)='./file1\x00', 0x400400, 0x15)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
r8 = getuid()
fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r6}, {0x2, 0x1, r8}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@fscache}, {@dfltgid={'dfltgid', 0x3d, r7}}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', r6}}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r6}}]}})
fchownat(r4, &(0x7f00000000c0)='./file2\x00', 0xffffffffffffffff, r7, 0x400)
sendfile(r1, r0, 0x0, 0xfffffdef)
sendmsg$nl_xfrm(r1, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)=@updpolicy={0x288, 0x19, 0x104, 0x70bd28, 0x25dfdbfd, {{@in6=@loopback, @in=@loopback, 0x4e21, 0x4, 0x4e23, 0x7, 0xa, 0x20, 0x20, 0x1}, {0x2, 0x5, 0x101, 0x1, 0x4, 0x7, 0x7, 0x75}, {0x2, 0x1, 0x8001, 0x2}, 0x0, 0x0, 0x0, 0x1, 0x2}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x8, 0x4e21, 0x800, 0x0, 0x80, 0x20, 0x4, 0x0, r6}, {0x200, 0x5, 0x2, 0x0, 0x1, 0xffffffffffffff75, 0x4, 0x76f}, {0xdd4, 0xfffffffffffffffc, 0x7ff, 0x1}, 0x8, 0x6e6bb3, 0x0, 0x0, 0x3, 0x2}}, @proto={0x5, 0x19, 0x6c}, @extra_flags={0x8, 0x18, 0x4}, @tmpl={0x104, 0x5, [{{@in=@multicast2, 0x4d4, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3500, 0x0, 0x1, 0x2, 0x76, 0x3, 0x739}, {{@in=@multicast1, 0x4d3, 0xff}, 0x2, @in6=@remote, 0x3506, 0x9, 0x2, 0xff, 0x50, 0x7, 0xffffffff}, {{@in6=@empty, 0x4d3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3501, 0x3, 0x0, 0xfa, 0x40, 0x4, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x3c}, 0x2, @in6=@local, 0x3503, 0x1, 0x2, 0xf9, 0x6, 0x5, 0x9}]}, @tfcpad={0x8, 0x16, 0x7f}, @proto={0x5, 0x19, 0x5}]}, 0x288}, 0x1, 0x0, 0x0, 0x1}, 0x4008050)

13:59:22 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:59:22 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(r0, &(0x7f0000003640)='./file1\x00', 0x100, 0x102)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000003680)='./file0\x00', 0x82361, 0x39)
open_by_handle_at(0xffffffffffffffff, &(0x7f00000036c0)=@reiserfs_3={0xc, 0x3, {0x2, 0x5, 0x9}}, 0x400900)
syncfs(r4)
sendfile(r2, r1, 0x0, 0xfffffdef)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r1, {0x80000000}}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r6=>0x0})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r7)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003540), r2)
sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000003600)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01082bbd70df155b744fdac116c3661abe7b109301250500030020000188060002003300000014000300ac1414aa000000000000000000"], 0x40}}, 0x20040810)
recvmmsg$unix(r4, &(0x7f0000002240)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000440)=""/33, 0x21}, {&(0x7f0000000500)=""/65, 0x41}, {&(0x7f0000000580)=""/100, 0x64}, {&(0x7f0000000600)=""/100, 0x64}, {&(0x7f0000000480)=""/20, 0x14}], 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000019000000010000000200", @ANYRES32=0x0, @ANYRES32=<r9=>0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/34, 0x22}, {&(0x7f0000000880)=""/237, 0xed}, {&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000009c0)=""/239, 0xef}], 0x4, &(0x7f0000000b00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000002100)=[{&(0x7f0000000c00)=""/200, 0xc8}, {&(0x7f0000000d00)=""/124, 0x7c}, {&(0x7f0000000d80)=""/189, 0xbd}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/131, 0x83}, {&(0x7f0000001f00)=""/216, 0xd8}, {&(0x7f0000002000)=""/221, 0xdd}], 0x7, &(0x7f0000002180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x3, 0x0, &(0x7f0000002300)={0x0, 0x989680})
sendmsg$nl_xfrm(r5, &(0x7f00000034c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003480)={&(0x7f0000002340)=@flushsa={0x1128, 0x1c, 0x200, 0x70bd27, 0x25dfdbff, {0x2b}, [@replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x8}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @tfcpad={0x8, 0x16, 0x5}, @replay_thresh={0x8, 0xb, 0x4}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast1, 0x4e24, 0x0, 0x4e20, 0x40, 0xa, 0x80, 0x0, 0x8, r6, r9}, {0x0, 0x1, 0x9, 0x4, 0x1, 0x0, 0x100000000, 0x1}, {0x80000000, 0x100000000, 0x3, 0x7ff}, 0x8, 0x0, 0x1, 0x1}}]}, 0x1128}, 0x1, 0x0, 0x0, 0x4}, 0x4c004)

[ 2886.434584] loop3: detected capacity change from 0 to 262144
[ 2886.436590] loop5: detected capacity change from 0 to 40
[ 2886.466418] loop2: detected capacity change from 0 to 40
13:59:22 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

[ 2886.475102] loop4: detected capacity change from 0 to 40
[ 2886.496361] loop6: detected capacity change from 0 to 40
[ 2886.553775] FAT-fs (loop6): invalid media value (0x29)
[ 2886.554704] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2886.739020] syz-executor.2: attempt to access beyond end of device
[ 2886.739020] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2886.739900] Buffer I/O error on dev loop2, logical block 10, lost async page write
13:59:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 3)

13:59:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)

[ 2886.863599] loop3: detected capacity change from 0 to 262144
[ 2886.894593] loop5: detected capacity change from 0 to 40
[ 2886.939161] FAULT_INJECTION: forcing a failure.
[ 2886.939161] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2886.940056] CPU: 0 PID: 13554 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2886.940803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2886.941543] Call Trace:
[ 2886.941791]  <TASK>
[ 2886.942001]  dump_stack_lvl+0x8f/0xb7
[ 2886.942371]  should_fail_ex.cold+0x5/0xa
[ 2886.942750]  strncpy_from_user+0x38/0x500
[ 2886.943143]  getname_flags.part.0+0x95/0x4f0
[ 2886.943557]  getname+0x92/0xe0
[ 2886.943875]  do_sys_openat2+0xf9/0x4c0
[ 2886.944149]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2886.944572]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2886.944934]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2886.945443]  __x64_sys_openat+0x143/0x200
[ 2886.945731]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2886.946169]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2886.946507]  do_syscall_64+0x3f/0x90
[ 2886.946853]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2886.947202] RIP: 0033:0x7fb98db01b19
[ 2886.947537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2886.948665] RSP: 002b:00007fb98b077188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2886.949351] RAX: ffffffffffffffda RBX: 00007fb98dc14f60 RCX: 00007fb98db01b19
[ 2886.949991] RDX: 00000000000026e1 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 2886.950642] RBP: 00007fb98b0771d0 R08: 0000000000000000 R09: 0000000000000000
[ 2886.951297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2886.951940] R13: 00007fff953514af R14: 00007fb98b077300 R15: 0000000000022000
[ 2886.952604]  </TASK>
[ 2887.362886] loop6: detected capacity change from 0 to 40
[ 2887.368877] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value
13:59:37 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001100010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:59:37 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0)

13:59:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b800000019000b7308bee52dd759dfd0777512000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000aa19face0116a0cd19d609c82b2cedd15599f896fb6ffa802ceed99696e975c52a457af086b7e138d82b34e7a3c1010ac41"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:59:37 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0xfffffff7, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010000000000800000000000020000000000007f8c000100000000000000000000000000000004000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
fallocate(r4, 0x9, 0x8, 0x3f)
sendfile(r1, r0, 0x0, 0xfffffdef)

13:59:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:59:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

13:59:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 4)

13:59:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 19)

[ 2901.523712] loop3: detected capacity change from 0 to 262144
[ 2901.524283] loop4: detected capacity change from 0 to 40
[ 2901.526538] loop2: detected capacity change from 0 to 40
[ 2901.584458] syz-executor.2: attempt to access beyond end of device
[ 2901.584458] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2901.585669] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2901.596005] loop6: detected capacity change from 0 to 40
13:59:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

13:59:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2901.612434] loop5: detected capacity change from 0 to 40
13:59:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 20)

[ 2901.689376] FAULT_INJECTION: forcing a failure.
[ 2901.689376] name failslab, interval 1, probability 0, space 0, times 0
[ 2901.690439] CPU: 1 PID: 13583 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2901.691143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2901.691877] Call Trace:
[ 2901.692120]  <TASK>
[ 2901.692328]  dump_stack_lvl+0x8f/0xb7
[ 2901.692752]  should_fail_ex.cold+0x5/0xa
[ 2901.693225]  ? __alloc_file+0x21/0x240
[ 2901.693599]  should_failslab+0x9/0x20
[ 2901.693942]  kmem_cache_alloc+0x5a/0x410
[ 2901.694315]  __alloc_file+0x21/0x240
[ 2901.694670]  alloc_empty_file+0x71/0x170
[ 2901.695192]  path_openat+0xd4/0x29b0
[ 2901.695543]  ? __pfx_path_openat+0x10/0x10
[ 2901.695941]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2901.696475]  do_filp_open+0x1ba/0x410
[ 2901.696761]  ? __pfx_do_filp_open+0x10/0x10
[ 2901.697268]  ? find_held_lock+0x2c/0x110
[ 2901.697731]  ? lock_release+0x3b6/0x750
[ 2901.698254]  ? do_raw_spin_lock+0x125/0x270
[ 2901.698666]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2901.699232]  ? _raw_spin_unlock+0x28/0x50
[ 2901.699628]  ? alloc_fd+0x2d8/0x6e0
[ 2901.700114]  do_sys_openat2+0x171/0x4c0
[ 2901.700490]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2901.701044]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2901.701495]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2901.702156]  __x64_sys_openat+0x143/0x200
[ 2901.702547]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2901.702984]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2901.703437]  do_syscall_64+0x3f/0x90
[ 2901.703782]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2901.704248] RIP: 0033:0x7fb98db01b19
[ 2901.704586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2901.706050] RSP: 002b:00007fb98b077188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2901.706610] RAX: ffffffffffffffda RBX: 00007fb98dc14f60 RCX: 00007fb98db01b19
[ 2901.707226] RDX: 00000000000026e1 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 2901.707841] RBP: 00007fb98b0771d0 R08: 0000000000000000 R09: 0000000000000000
[ 2901.708463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2901.709095] R13: 00007fff953514af R14: 00007fb98b077300 R15: 0000000000022000
[ 2901.709759]  </TASK>
13:59:37 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0)

[ 2901.736819] syz-executor.6: attempt to access beyond end of device
[ 2901.736819] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2901.738277] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2901.759558] loop4: detected capacity change from 0 to 40
[ 2901.774808] loop3: detected capacity change from 0 to 262144
13:59:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')

13:59:38 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001200010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2901.883629] loop2: detected capacity change from 0 to 40
13:59:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000003000007f8c000000000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syz_io_uring_setup(0x35f0, &(0x7f00000002c0)={0x0, 0xf458, 0x1, 0x3, 0xf0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000000c0))
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2901.966851] syz-executor.2: attempt to access beyond end of device
[ 2901.966851] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2901.968002] Buffer I/O error on dev loop2, logical block 10, lost async page write
13:59:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21)

13:59:38 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0)

[ 2902.021284] loop3: detected capacity change from 0 to 262144
13:59:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 5)

[ 2902.072729] loop6: detected capacity change from 0 to 40
13:59:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2902.156642] loop4: detected capacity change from 0 to 40
[ 2902.176647] loop5: detected capacity change from 0 to 40
[ 2902.202195] syz-executor.6: attempt to access beyond end of device
[ 2902.202195] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2902.203186] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2902.302017] loop2: detected capacity change from 0 to 40
[ 2902.309620] syz-executor.6: attempt to access beyond end of device
[ 2902.309620] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2902.311524] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2902.425812] FAULT_INJECTION: forcing a failure.
[ 2902.425812] name failslab, interval 1, probability 0, space 0, times 0
[ 2902.427492] CPU: 0 PID: 13612 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2902.428618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2902.429740] Call Trace:
[ 2902.430102]  <TASK>
[ 2902.430434]  dump_stack_lvl+0x8f/0xb7
[ 2902.430996]  should_fail_ex.cold+0x5/0xa
[ 2902.431628]  should_failslab+0x9/0x20
[ 2902.432189]  __kmem_cache_alloc_node+0x5b/0x400
[ 2902.432856]  ? iter_file_splice_write+0x169/0xcb0
[ 2902.433586]  ? iter_file_splice_write+0x169/0xcb0
[ 2902.434273]  __kmalloc+0x46/0xc0
[ 2902.434787]  iter_file_splice_write+0x169/0xcb0
[ 2902.435461]  ? generic_file_read_iter+0x330/0x550
[ 2902.436198]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2902.436960]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2902.437754]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2902.438574]  ? inode_security+0x105/0x140
[ 2902.439238]  ? security_file_permission+0xb5/0xe0
[ 2902.439978]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2902.440757]  direct_splice_actor+0x113/0x180
[ 2902.441450]  splice_direct_to_actor+0x33a/0x8c0
[ 2902.442155]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2902.442913]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2902.443701]  ? security_file_permission+0xb5/0xe0
[ 2902.444453]  do_splice_direct+0x1bc/0x290
[ 2902.445103]  ? __pfx_do_splice_direct+0x10/0x10
[ 2902.445839]  ? lock_is_held_type+0xdb/0x130
[ 2902.446531]  do_sendfile+0xb1d/0x1280
[ 2902.447151]  ? __pfx_do_sendfile+0x10/0x10
[ 2902.447820]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2902.448575]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2902.449408]  __x64_sys_sendfile64+0x248/0x2a0
[ 2902.450085]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2902.450835]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2902.451575]  do_syscall_64+0x3f/0x90
[ 2902.452143]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2902.452908] RIP: 0033:0x7f61b5a02b19
[ 2902.453461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2902.456005] RSP: 002b:00007f61b2f78188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2902.457116] RAX: ffffffffffffffda RBX: 00007f61b5b15f60 RCX: 00007f61b5a02b19
[ 2902.458152] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2902.459155] RBP: 00007f61b2f781d0 R08: 0000000000000000 R09: 0000000000000000
[ 2902.460160] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2902.461178] R13: 00007ffdbc84f80f R14: 00007f61b2f78300 R15: 0000000000022000
[ 2902.462220]  </TASK>
13:59:53 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001300010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:59:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

13:59:53 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xb8}}, 0x0)

13:59:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000010000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
write$binfmt_aout(r4, &(0x7f0000000500)={{0x1c4, 0x7f, 0x6, 0x1d7, 0x157, 0x4, 0x1db, 0xbba}, "d6bca1bef5fa7b48a93e1f03d120954171c30e996611767d7b8c0b00e09f4477c5451daba5206574334312b1e79dd69b114c8303d4b8832b96c179803f351762b8e21d986b7803614871c744f940357f8b5acfcbd8627c9da4c2cfbca65aa55e11eacdff133e992d9079f4f3cb07d9d11e33452c324916bd489901edaca80505a362dd59ea2847992d143ccda67ad6d1895428f9319072a616dfae181e824b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7bf)

13:59:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])

13:59:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 6)

13:59:53 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2804}], 0x410, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX=0x0, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES64=r0, @ANYRES32=r2])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r5)
sendfile(r4, r3, 0x0, 0xfffffdef)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000002c0)={{0xfe, 0xfb}, {0x3, 0x5}, 0xa4, 0x4, 0x5})

13:59:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22)

[ 2917.629651] loop6: detected capacity change from 0 to 40
[ 2917.634305] loop3: detected capacity change from 0 to 262144
[ 2917.636725] loop5: detected capacity change from 0 to 40
[ 2917.659094] FAULT_INJECTION: forcing a failure.
[ 2917.659094] name failslab, interval 1, probability 0, space 0, times 0
[ 2917.659965] CPU: 0 PID: 13628 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2917.660516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2917.661068] Call Trace:
[ 2917.661253]  <TASK>
[ 2917.661435]  dump_stack_lvl+0x8f/0xb7
[ 2917.661714]  should_fail_ex.cold+0x5/0xa
[ 2917.662011]  ? security_file_alloc+0x38/0x170
[ 2917.662338]  should_failslab+0x9/0x20
[ 2917.662622]  kmem_cache_alloc+0x5a/0x410
[ 2917.662922]  security_file_alloc+0x38/0x170
[ 2917.663231]  __alloc_file+0xb6/0x240
[ 2917.663504]  alloc_empty_file+0x71/0x170
[ 2917.663797]  path_openat+0xd4/0x29b0
[ 2917.664081]  ? __pfx_path_openat+0x10/0x10
[ 2917.664374]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2917.664708]  do_filp_open+0x1ba/0x410
[ 2917.664988]  ? __pfx_do_filp_open+0x10/0x10
[ 2917.665304]  ? find_held_lock+0x2c/0x110
[ 2917.665579]  ? lock_release+0x3b6/0x750
[ 2917.665875]  ? do_raw_spin_lock+0x125/0x270
[ 2917.666195]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2917.666543]  ? _raw_spin_unlock+0x28/0x50
[ 2917.666852]  ? alloc_fd+0x2d8/0x6e0
[ 2917.667131]  do_sys_openat2+0x171/0x4c0
[ 2917.667421]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2917.667746]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2917.668085]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2917.668476]  __x64_sys_openat+0x143/0x200
[ 2917.668764]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2917.669104]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2917.669443]  do_syscall_64+0x3f/0x90
[ 2917.669707]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2917.670057] RIP: 0033:0x7fb98db01b19
[ 2917.670308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2917.671449] RSP: 002b:00007fb98b077188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2917.671937] RAX: ffffffffffffffda RBX: 00007fb98dc14f60 RCX: 00007fb98db01b19
[ 2917.672394] RDX: 00000000000026e1 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 2917.672848] RBP: 00007fb98b0771d0 R08: 0000000000000000 R09: 0000000000000000
[ 2917.673327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2917.673790] R13: 00007fff953514af R14: 00007fb98b077300 R15: 0000000000022000
[ 2917.674263]  </TASK>
[ 2917.682224] loop2: detected capacity change from 0 to 40
[ 2917.720104] loop4: detected capacity change from 0 to 40
[ 2917.723048] syz-executor.6: attempt to access beyond end of device
[ 2917.723048] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2917.724077] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:59:53 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x8000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x0, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])

[ 2917.862808] syz-executor.2: attempt to access beyond end of device
[ 2917.862808] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2917.864554] Buffer I/O error on dev loop2, logical block 10, lost async page write
13:59:54 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xb8}}, 0x0)

[ 2917.925463] loop3: detected capacity change from 0 to 262144
13:59:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
recvmsg$unix(r3, &(0x7f00000000c0)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000c00)=""/257, 0x101}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f00000005c0)=""/151, 0x97}, {&(0x7f0000000740)=""/95, 0x5f}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000680)=""/141, 0x8d}, {&(0x7f0000000340)=""/231, 0xe7}, {&(0x7f0000000d40)=""/261, 0x105}, {&(0x7f0000000b40)=""/160, 0xa0}], 0x9, &(0x7f0000000ac0)}, 0x2)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0xbb0d23fcb80462c3)
sendfile(r1, r0, 0x0, 0xfffffdef)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8840)

13:59:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 7)

13:59:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23)

13:59:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001400010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

13:59:54 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x8000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x0, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])

[ 2918.061095] loop5: detected capacity change from 0 to 40
13:59:54 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xb8}}, 0x0)

[ 2918.090627] loop6: detected capacity change from 0 to 40
[ 2918.091891] loop2: detected capacity change from 0 to 40
[ 2918.119748] loop3: detected capacity change from 0 to 262144
[ 2918.154106] FAULT_INJECTION: forcing a failure.
[ 2918.154106] name failslab, interval 1, probability 0, space 0, times 0
[ 2918.155076] CPU: 0 PID: 13655 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2918.155653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2918.156278] Call Trace:
[ 2918.156462]  <TASK>
[ 2918.156626]  dump_stack_lvl+0x8f/0xb7
[ 2918.156906]  should_fail_ex.cold+0x5/0xa
[ 2918.157211]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2918.157553]  should_failslab+0x9/0x20
[ 2918.157840]  kmem_cache_alloc+0x5a/0x410
[ 2918.158139]  fat_cache_add.part.0+0x5b4/0xb50
[ 2918.158474]  fat_get_cluster+0x922/0xd40
[ 2918.158781]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2918.159133]  fat_get_mapped_cluster+0x216/0x450
[ 2918.159469]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 2918.159828]  fat_bmap+0x1fc/0x460
[ 2918.160093]  fat_get_block+0x33e/0x930
[ 2918.160385]  ? __pfx_fat_get_block+0x10/0x10
[ 2918.160698]  ? lock_is_held_type+0xdb/0x130
[ 2918.161025]  __block_write_begin_int+0x380/0x13d0
[ 2918.161387]  ? __pfx_fat_get_block+0x10/0x10
[ 2918.161713]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2918.162082]  ? __pfx___lock_acquire+0x10/0x10
[ 2918.162410]  ? PageHeadHuge+0x169/0x1b0
[ 2918.162715]  ? __pfx_fat_get_block+0x10/0x10
[ 2918.163029]  block_write_begin+0xb9/0x450
[ 2918.163319]  cont_write_begin+0x4fe/0x700
[ 2918.163621]  ? current_time+0x79/0x2c0
[ 2918.163913]  ? __pfx_fat_get_block+0x10/0x10
[ 2918.164224]  ? mark_held_locks+0x9e/0xe0
[ 2918.164518]  ? __pfx_cont_write_begin+0x10/0x10
[ 2918.164853]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2918.165195]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2918.165574]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2918.165906]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2918.166265]  ? ktime_get_coarse_real_ts64+0x100/0x190
[ 2918.166632]  fat_write_begin+0x89/0x180
[ 2918.166914]  ? __pfx_fat_get_block+0x10/0x10
[ 2918.167232]  generic_perform_write+0x25a/0x580
[ 2918.167570]  ? __pfx_generic_perform_write+0x10/0x10
[ 2918.167928]  ? __pfx_fat_update_time+0x10/0x10
[ 2918.168233]  ? __pfx_file_update_time+0x10/0x10
[ 2918.168572]  ? generic_write_checks+0x2c0/0x400
[ 2918.168908]  __generic_file_write_iter+0x308/0x4b0
[ 2918.169242]  ? do_sendfile+0xb1d/0x1280
[ 2918.169541]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 2918.169875]  generic_file_write_iter+0xe7/0x350
[ 2918.170212]  do_iter_readv_writev+0x211/0x3c0
[ 2918.170540]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2918.170890]  ? avc_policy_seqno+0xd/0x70
[ 2918.171190]  ? security_file_permission+0xb5/0xe0
[ 2918.171548]  do_iter_write+0x18b/0x700
[ 2918.171840]  ? lock_is_held_type+0xdb/0x130
[ 2918.172143]  vfs_iter_write+0x74/0xb0
[ 2918.172424]  iter_file_splice_write+0x73e/0xcb0
[ 2918.172768]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2918.173129]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2918.173495]  ? inode_security+0x105/0x140
[ 2918.173815]  ? security_file_permission+0xb5/0xe0
[ 2918.174160]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2918.174526]  direct_splice_actor+0x113/0x180
[ 2918.174843]  splice_direct_to_actor+0x33a/0x8c0
[ 2918.175162]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2918.175518]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2918.175886]  ? security_file_permission+0xb5/0xe0
[ 2918.176220]  do_splice_direct+0x1bc/0x290
[ 2918.176519]  ? __pfx_do_splice_direct+0x10/0x10
[ 2918.176862]  ? lock_is_held_type+0xdb/0x130
[ 2918.177170]  do_sendfile+0xb1d/0x1280
[ 2918.177470]  ? __pfx_do_sendfile+0x10/0x10
[ 2918.177765]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2918.178123]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2918.178519]  __x64_sys_sendfile64+0x248/0x2a0
[ 2918.178843]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2918.179184]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2918.179542]  do_syscall_64+0x3f/0x90
[ 2918.179810]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2918.180155] RIP: 0033:0x7f61b5a02b19
[ 2918.180421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2918.181565] RSP: 002b:00007f61b2f78188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2918.182055] RAX: ffffffffffffffda RBX: 00007f61b5b15f60 RCX: 00007f61b5a02b19
[ 2918.182521] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2918.182985] RBP: 00007f61b2f781d0 R08: 0000000000000000 R09: 0000000000000000
[ 2918.183442] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2918.183906] R13: 00007ffdbc84f80f R14: 00007f61b2f78300 R15: 0000000000022000
[ 2918.184394]  </TASK>
[ 2918.213772] syz-executor.6: attempt to access beyond end of device
[ 2918.213772] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2918.214769] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:59:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 8)

13:59:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2918.267189] syz-executor.6: attempt to access beyond end of device
[ 2918.267189] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2918.269916] Buffer I/O error on dev loop6, logical block 10, lost async page write
13:59:54 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x8000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x0, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])

13:59:54 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}}, 0x0)

13:59:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2918.379731] loop4: detected capacity change from 0 to 40
[ 2918.382849] loop5: detected capacity change from 0 to 40
[ 2918.401685] loop3: detected capacity change from 0 to 262144
[ 2918.430158] FAULT_INJECTION: forcing a failure.
[ 2918.430158] name failslab, interval 1, probability 0, space 0, times 0
[ 2918.431325] CPU: 0 PID: 13670 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2918.431916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2918.432507] Call Trace:
[ 2918.432699]  <TASK>
[ 2918.432871]  dump_stack_lvl+0x8f/0xb7
[ 2918.433159]  should_fail_ex.cold+0x5/0xa
[ 2918.433475]  should_failslab+0x9/0x20
[ 2918.433765]  kmem_cache_alloc_lru+0x6b/0x760
[ 2918.434095]  ? __d_alloc+0x31/0x9c0
[ 2918.434393]  __d_alloc+0x31/0x9c0
[ 2918.434673]  d_alloc_parallel+0x10e/0x1530
[ 2918.434996]  ? lock_release+0x3b6/0x750
[ 2918.435296]  ? __d_lookup+0x270/0x450
[ 2918.435585]  ? lock_release+0x3b6/0x750
[ 2918.435857]  ? lookup_open.isra.0+0x228/0x1250
[ 2918.436209]  ? __pfx_d_alloc_parallel+0x10/0x10
[ 2918.436567]  ? __d_lookup+0x292/0x450
[ 2918.436863]  lookup_open.isra.0+0x914/0x1250
[ 2918.437178]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 2918.437578]  path_openat+0x946/0x29b0
[ 2918.437881]  ? __pfx_path_openat+0x10/0x10
[ 2918.438205]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2918.438557]  do_filp_open+0x1ba/0x410
[ 2918.438849]  ? __pfx_do_filp_open+0x10/0x10
[ 2918.439168]  ? find_held_lock+0x2c/0x110
[ 2918.439477]  ? lock_release+0x3b6/0x750
[ 2918.439783]  ? do_raw_spin_lock+0x125/0x270
[ 2918.440086]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2918.440448]  ? _raw_spin_unlock+0x28/0x50
[ 2918.440765]  ? alloc_fd+0x2d8/0x6e0
[ 2918.441031]  do_sys_openat2+0x171/0x4c0
[ 2918.441354]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2918.441696]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2918.442070]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2918.442480]  __x64_sys_openat+0x143/0x200
[ 2918.442797]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2918.443161]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2918.443536]  do_syscall_64+0x3f/0x90
[ 2918.443822]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2918.444204] RIP: 0033:0x7fb98db01b19
[ 2918.444483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2918.445627] RSP: 002b:00007fb98b077188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2918.446174] RAX: ffffffffffffffda RBX: 00007fb98dc14f60 RCX: 00007fb98db01b19
[ 2918.446690] RDX: 00000000000026e1 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 2918.447198] RBP: 00007fb98b0771d0 R08: 0000000000000000 R09: 0000000000000000
[ 2918.447695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2918.448201] R13: 00007fff953514af R14: 00007fb98b077300 R15: 0000000000022000
[ 2918.448731]  </TASK>
[ 2918.469222] syz-executor.2: attempt to access beyond end of device
[ 2918.469222] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2918.470854] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:00:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

14:00:13 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
chroot(&(0x7f0000000000)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:00:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x4000000000003d19, 0x5, &(0x7f0000000440)=[{&(0x7f0000000180)="1f12b3707eb78f65a4cc9d055a2446d7e880ee37106fa34ea852e39f1d01d13eb328f0413135", 0x26, 0x6}, {&(0x7f00000002c0)="65a1de670703101a06831a0a80d36ffe51a5bfee9ab1d4303c5724b920123371d6a72e78d31b7f8c6b94ed3cb835e4c54639826556697bac0bbc2aabef68108d9e18b393e71f632a2069d0a181499b7468462286c7ac7377e13190b43a6a3ffdb882000028a174b70e9616f3ed9f485ebefb614645182d23152fb7", 0x7b, 0x8}, {&(0x7f0000001640)="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", 0x139, 0x6b2}, {&(0x7f0000000240)="2e75a06fd2722c85d86087af956d8788651cbdef13f98c", 0x17, 0xff}, {&(0x7f0000000500)="68d36ea009b86e99882a8c1a9ad911a0bb260b75dc8d8f03bdf8872b9221ff502e20ec49dbda0f49b9c07f8f043bc60500f7c90189845279de4927ea6bcdf3ba3c49f0369a6face63ded370d49aeb190c6150b9c1edcdd3cc4264be9fa5d3109ac480a90ea9a69bdae8c957451e9b69489529a9563078d9c390176126a5456551bafc86756afc82331e84f8b93f9bcee6dd102e1ea98b65425cace12b383bce34cf0c3c25e3b67ed1e04384b39bf928f7084f44406405771e317b52b65cd36bf61cf588a739c79b861731db7f59f32883584d6bde888ecc07c0efa5c614d3728c9105557b84d63e152a392c683cd8e5d92da805d9a7e61959565fea0622855a6ec903d27c0b57bd65776696f8b1595f1c9dfb49f30bdf2d8d885e20f1a9b01b2147235a28cd07b2f4b1cb6838dd867187e52361c00a246249ff4ee789ebc3441ba9d378c7b9562e0b9ef66062b29e9edb252bc4e724d6cb69fae3e5c48c85f629f425c8abd2920716ef62773677bca572d4367edd05c64f8b80baf1dda453ba3698939ee7a60496300f167d5a35277d7658b7c6d5d8f50095ac34711a037fe04ce70d94f8a74df8a535b7a162c7426385d76d7bf0a6769faca04651950e62228b74565ed660665d081c7d2b31abfe7761a4c0e7287dc9bbc5788e0f760309c84d38609cba79fa85c6a49ea95995661177de820e86cc3cc4a18cc9e9f1f21fce11cbd66551073dafee41fec65d01e7a0af8f2e8cf20a5a8f0a369ac19076276e88b2ea4836bde068ffc8db8b77328e5859dd73e464d373e597bd81d1dba81ef958d1fc1098e2d271e8426a384e626449a5d788d4b86085165e1e259f6d3717f51c021f2c506e1e6f4e12cc8d93559681a89abb839184c2dde69f622ba9566cbf8781a8c42c8dfa61eb8389ab459a14b3c9a328bc272cdda28ac28dbd3a2960cb42056c116dd09758df792d091bf52c8c41ad90df82b67b0a4b19e4574745d7dd3806707c15a742517866079b702077aac7a51dbc8f5f4a29fd2f8d93c0770140325e3b465214f00cda4a71473f11d1e0956d567f4645df4cd27385b9d19563aad0741ab7e24d4b1ea4e5017d75eb1b16d6510016d9668e5bd159a4b513206dedbd9517d5c6c995d0a64c120a2b83aebab6c62ec8d0b589e839df7ea1a04aa50ae96f22ef793b11891fd0e9ea1eb48de82700e7d5b87f0c3bd8483c706ac3bcd302a9a9f4d0101dfa9dc4a51e50b6862483174c12383f9b9bf79c43be374370c7d8dbf4e4409947c78fa2079af92fc7f4a4aae368de50e044512a7b139708ee305dad2bf0758d5ae9317122e07fd8c84bf06dda4346449c0153c35ef19591eb567077764ca214bd81e9ad911acf03eb5ab16e755d71ebf6dde23367e54fc3eaae336b44055293e57a3903acd7c8e7e477a8ea25011f471595b90ecb8b5abf022ec7a3025f16843e84729a14f88113f8e9824df00b5e68ece7cefb46a67bd81da68b3cafd6873fc396685e84d65101a7df828e8c304380756b59245b981d254bfbe32762e932db3b408cc878d847066c2ce96b6db9bba5ffb315d9badbec3e729fa3fd7648ecf62eea8dc71e897252745c623136ac0f2a9f28212896359488251ee77d6f82d028a88b64d327cae0b59bda954cb059b7c47edf751183e343082920c6a0cb7c5ba0d2d896cb62b9760b528407e671e450faa3b8f76700802787cde44e1f9a3aa154a3ea242050f2572c2393f13bfb07c174f294215bd93a613bc362dc5a22a1eb7c5dd2616beead7f6477a4516c177b223036603cb6c0d70139b3268d04fb82e1a6aff50ed617d770873b53dc68728505918e899e66e16c3e58f120f002ca05b2a0ba655dc686b6c6e372e54ba8e93f35c159b0c5f5e2454d5251da3dbdc4de55439d4fb5ca7b9aa9ef15d1594996a92f12181db412825a6daab14c90f413500706c4a4a8274720c7074558f0a4144faf6b420044228c21b9e03031f17a16fd65a50b35743332b1b93332dbe5163630485a10d26ae384c80595c07549c83c3984d95d8eb05f0b9297d0e04021be7673fb67dcab10c33bdd8d32de652db1eb41f47ee5318d9c756146bdac510b9a31d26a3cf0ab8667de9835d7e3fc6fe6104ba1093c824638e6c25a3920681dbfc2f102cbb0bf0cdc8f75b66d94d5418d6c8d087d1977e16fa730bfc975b394575841d78da803b86dd7ad795bddabcb42a514a9c32378372f71b06029a3a28f65603bf1a97eac98c5bbd68ab191b6409fae4bc31b4b82c462cdbb3d31d9fab452ced4157ad9465e8145c649ac1ded845b98bd2d6d968aa7d90b037e6684338a810f71b8f3fe939ffecdb308e4adc085a08a9b8f6301ba5ec8f8dd3361bfb2b07dba6a8ddb005469cfcb4fe7053f15f347ff790b739aadaae3bbcbde61c2a9e0b781f7ef848c63586b3ae7c11a70943d97f7537a1a525a722f5cbe2ff19f3096545dea7c8397166a13c219e96bcc93ce6b1d01fb02c8558eae22cf5dd1b27949203fd8001fe8b193ca1c29da7359f718d93c2ea1e5a4477a7f86058118e1acbbc361bd87ac2600def1ffceb88dbdc3c32e81f9968b67cc2409603ec9acefced7c65a76999c5754c40059e2ec238c800cb2174bb85f7bd01877633b3b0265f322580ac07c098b88498549cee4f068570fbfe5b08ac56fe82c7668b64d74ffea55f6d0ae5ebbe724e19945496c7f8774465496b22273594c6a26b594a67bc9e9697eefb06cd923c7a0411e363f853bed70854c0fae1b2ac61ed55a753efce6886f99e12e9b13915eb02d3e19668fbe53ae040788fea429348aaf8c01ef0663613851e7a6cebc1a967d0e51169e502380babd51c38f77c90b599cd58b5d1c47b1aa049b555c0be53339037638651e46fc317559c4a15dae99109f6ca3facab38bb58f5d27868e80c51ab64d13486f7e0f6e9705562c7ceda39d5453368c64deb95df500fc368726ee3402919606bd995fa4f801fb7fd61ead8daad2a41c1c9baa3fcfb32a17690e88bc97fd2998cfd7b7708ee5034d85716ce7e0c5f9986aa3fcbe57f1bd3e32d92855f413d2122b20cb2d0b1b8a6172242e546349b563102216e9a680985ba11fe20215fd304638320a7907bab2dba86bf82a6dfc5b78198ff0304f59618a8751894764aba4114cea6ae3f8571e8c31ae3927cb30bc8ffac348e4ad85c07ced37c923585284e68cc6e911c2ed6719d076696f75eb84785e12e40e6517dfae8fcc22db24ecbc808c324af9998da6d8f6a99016f4cf44aa27c837a3c37d39492dc106f44b872dbe6b5ef113bce2c731e8e902e477746d04d7a01463bc7171e9c39347c76f7e3ca24908ad247b06fc0f0eeca59c66c1ef67b926e27fe4c0021b5897b27799d4ad277613a4836bee650fbba078f8429d7e327a7c937ad24c7cbf7386406ed7bf8e77562e772b40519838960efd21b622ed8f01fa08817771a516c8c6e82eae4635d8ff902ed900f238e7d781286975413842ac2b546283d836bc5720a58d643ce14bd0709fb015ffe436fa6f8dffb01af92911373051c496a5ca73669fd27d049d2c177f199d8b5fa843d63991ffe8ecf900a0763057f1734a403d9816aa7dbc1b19b44b83694a74b5fac955eb08359a1bb9671491d4eab818ba7a5569bd451e35d4588b663bbb4c6bed72624bb6805d763411dc97530b53b1834c8f6601458e02cd38685ac1c58ff0f9a2deece4aceacb58ea0aa2b1cfd06307f43225b9029f370dbea56857d9a9616fc9f1a851d44ddf67eaf1c933d09374e39070cb3f3555d5edb089db2a802878f99d2723a4b21e3be3560f8c7c2c3c882f5f8432ffc34c399b28519ef08372e18b35664492f15262427499dffe9c3b09a1f6503dc056aeea082a639bd3578725bc2dc40896436dc54befcd2ee7b1c33e170012b58213923d2459dc543b6d4f0817ee91baf31c2277ad4e3e68b02e23ab5963c84bb7fd29233132aaff3812a44ef2ac25c284a6c92434a9a47bd2c2bbff3d5c52ad4fb3d9bb6893d1f89a2bf9445a68a38d24fdf19e2097917003b18bc959154b9594091534030b0afe5a40626d81f9b5eedbecda0660d01c66bfd9952e80c5c5aa01c1597b478b24f44c3f66b969b184492a7847496ed5e6592bd512f29f20c0e5f3d8f1fc4ac6ec057626a7c55dcc936532a3a26abd8dc4fd97abf2123c8ce4fe8312feb084ec03340773284b971c0510a9c1a2b3e2c20ad183c0858e4a12e7ddee77ae79d866292d4becf13ac5526f48706dd4d15474bdde7e2fc44699427e22e055c1e51b7a66f86f494a0bd4160d346bb4f1113f1e525ddbad1255c0eed6b0594941fb674d6d0779b2671b82da9c21c0f9256bdf5c970d83104960a61351a336b18814f4a5395491c2a6e2e9acda425d6abd02cc9fd423bd30d1b3b7b0f885fa298b2da5afa12f0b6369cfaf92b73b7e810225d4893b52efcd9aa2ab1a10606c8807f3baac6375b1349f9ff7e6a0dddf9bed12e26c2d09ef04582123bf1b419e38ae1b91ea4c12047830f064f17c7776415f361e175e3f00d9d82b11dd22a4bac0b66f9315d896b317acfbb50b69d99b6dde479a8f9eb4f3d7d6203fc941be134908b062983a62bb2d21f5483bcb39a22c471664ca3f6cfddf51e4cb361dae7dd643c281ee4fe85ea698cdd3c06612e4fe81b54b2b06d314abd1796b58590cf7b7ee9c3990bd52e14e9ead9b273379b1abab9470011d6ba3a4bc0901d3185c886fe32d8632f87a651a36058e6a2be7f69486d3f4c1c421066500bdf2fc625c55efa7d15ca8f40f910c38e9a2596bfb921c91386bd418615d2f1ec33367de6f3897b443587f787365941c8d5ec0ec950735ac3c9d6f2836486d23dcec4a83f081b94755b6b454c735d848a289d74c403f8fc6deb3336a4fd380419a15a08710809b7552311905a87f73375a14d7cbfe8184c7174fbf8c987058363db18ab56baae4d925d2bf83daf46a913fe1b4126c366a82678648e16637ce1fc1161921bf12a42881dd40dfb58395a4bfb16eab50422030f14056dbe79450b8c54ab8bee925d3af16a14e6f0e463cf768856078f2deaa6bd16e4472312366dcd8b072f511f1502583faa92e5948a4ef815b711b98ba6d4137a23411769a2950df47fc9d0c4db889a25e6bca336a5060d4d3f030ce015700e6efaef6cfbcb361f9d88909b534d4180875d8eb8213b43a91adcf999f685df383afff8d0b83aef4b290a07413568f4aa0d1c6b3ca08ef401d79b68ce15b3ebc13e58ad811f8079c0063825d3669baad7c8e646265b34d5fe12cdcec059192b149db6c6bf5760a15e27425382886997881c3a3253dcd0fe82e14525885078807cb820fc962ef5c8bb4fefcf5a094e4762451c26af5ee78ce84c28290a80061da36a92b8fe08f6bc0b69cd4135610f88fd41718ed9eff315c6dd0a4824a57042b49a6400352e61c6d2721c72e8c3bd76ade6998a73d6e555c15148bbca74e38768a4e2a062c28aa89bab7791f996efe2fd325f22c701d22e7249fbe1f720adf7dc4dd553edeef3bc9cc3d2cfd3885ffe34a879d01e81e4b50fd110c02cb60e078980983349f36dfbd3c64b61c11ff4b8b89c6a869e215c9a4831ccc987ab7ed634f7295e7ca2f09ad4319ec12e2d0f31008bce99a791e20e14e59cf8def530af3195096c5bf84c2108358fb3c149d45e619c953dfd199828774a350ca4f5e22c605e0ebe96d9ae0ecc478a852ea4e5eedbe7fe6c6ff4b280f159c3b3d25306bc32957cc124e762002d42549a3213375b40b4fbed40f5", 0x1000, 0x9}], 0x8000, &(0x7f0000001500)={[{'vfat\x00'}, {')'}, {'[(\xc4$&$,'}], [{@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}]})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:00:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 9)

14:00:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x8000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x0, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])

14:00:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24)

14:00:13 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001600010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2937.845212] loop5: detected capacity change from 0 to 40
14:00:13 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}}, 0x0)

[ 2937.852380] loop6: detected capacity change from 0 to 40
[ 2937.857449] loop4: detected capacity change from 0 to 40
[ 2937.869568] loop3: detected capacity change from 0 to 262144
[ 2937.874373] loop2: detected capacity change from 0 to 40
[ 2937.967536] syz-executor.6: attempt to access beyond end of device
[ 2937.967536] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2937.969074] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2938.018651] syz-executor.6: attempt to access beyond end of device
[ 2938.018651] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2938.020740] Buffer I/O error on dev loop6, logical block 10, lost async page write
14:00:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 10)

[ 2938.112555] syz-executor.2: attempt to access beyond end of device
[ 2938.112555] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2938.114423] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:00:14 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}}, 0x0)

14:00:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x8000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x0, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])

[ 2938.228334] loop5: detected capacity change from 0 to 40
[ 2938.258333] FAULT_INJECTION: forcing a failure.
[ 2938.258333] name failslab, interval 1, probability 0, space 0, times 0
[ 2938.259913] CPU: 1 PID: 13705 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2938.260795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2938.261669] Call Trace:
[ 2938.261962]  <TASK>
[ 2938.262221]  dump_stack_lvl+0x8f/0xb7
[ 2938.262668]  should_fail_ex.cold+0x5/0xa
[ 2938.263141]  ? fat_parse_long.constprop.0+0x8e9/0xb50
[ 2938.263725]  should_failslab+0x9/0x20
[ 2938.264161]  kmem_cache_alloc+0x5a/0x410
[ 2938.264618]  ? lock_release+0x3b6/0x750
[ 2938.265087]  fat_parse_long.constprop.0+0x8e9/0xb50
[ 2938.265650]  ? lock_acquire+0x1b6/0x530
[ 2938.266122]  fat_search_long+0x384/0xda0
[ 2938.266606]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2938.267159]  ? trace_contention_end+0xdc/0x140
[ 2938.267692]  ? __pfx_fat_search_long+0x10/0x10
[ 2938.268212]  ? __mutex_lock+0x231/0x14e0
[ 2938.268703]  ? vfat_lookup+0xef/0x560
[ 2938.269142]  ? avc_has_perm+0x10c/0x1c0
[ 2938.269619]  ? __pfx_avc_has_perm+0x10/0x10
[ 2938.270129]  ? selinux_determine_inode_label+0x1b6/0x350
[ 2938.270748]  vfat_lookup+0x245/0x560
[ 2938.271193]  ? __pfx_vfat_lookup+0x10/0x10
[ 2938.271698]  lookup_open.isra.0+0x751/0x1250
[ 2938.272214]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 2938.272819]  path_openat+0x946/0x29b0
[ 2938.273276]  ? __pfx_path_openat+0x10/0x10
[ 2938.273768]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2938.274305]  do_filp_open+0x1ba/0x410
[ 2938.274750]  ? __pfx_do_filp_open+0x10/0x10
[ 2938.275255]  ? find_held_lock+0x2c/0x110
[ 2938.275719]  ? lock_release+0x3b6/0x750
[ 2938.276178]  ? do_raw_spin_lock+0x125/0x270
[ 2938.276668]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2938.277221]  ? _raw_spin_unlock+0x28/0x50
[ 2938.277703]  ? alloc_fd+0x2d8/0x6e0
[ 2938.278133]  do_sys_openat2+0x171/0x4c0
[ 2938.278606]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2938.279118]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2938.279693]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2938.280328]  __x64_sys_openat+0x143/0x200
[ 2938.280805]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2938.281355]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2938.281911]  do_syscall_64+0x3f/0x90
[ 2938.282343]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2938.282916] RIP: 0033:0x7fb98db01b19
[ 2938.283340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2938.284300] loop3: detected capacity change from 0 to 262144
[ 2938.285240] RSP: 002b:00007fb98b077188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2938.285289] RAX: ffffffffffffffda RBX: 00007fb98dc14f60 RCX: 00007fb98db01b19
[ 2938.285307] RDX: 00000000000026e1 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 2938.288318] RBP: 00007fb98b0771d0 R08: 0000000000000000 R09: 0000000000000000
[ 2938.289069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2938.289874] R13: 00007fff953514af R14: 00007fb98b077300 R15: 0000000000022000
[ 2938.290679]  </TASK>
14:00:34 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25)

14:00:34 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', <r4=>0x0, 0x4, 0x6, 0x7d, 0x1, 0x40, @mcast2, @mcast1, 0x10, 0x40, 0x7ff, 0x9}})
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=@getsadinfo={0x2b8, 0x23, 0x100, 0x70bd25, 0x25dfdbfd, 0x0, [@algo_comp={0x97, 0x3, {{'lzs\x00'}, 0x278, "77e6d2459dddb052d7269381548d50662b37a69247d998e386459a079d7c71a7c049dca23207f293b7e38cccf7eadf7a7256db7e561c61c7bc0858d9fedd8bd87645165432232e72e10ac4af37f3b7"}}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xa}}, @tfcpad={0x8, 0x16, 0x2}, @migrate={0x1cc, 0x11, [{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x33}, @in=@rand_addr=0x64010101, @in6=@remote, 0x33, 0x4, 0x0, 0x3504, 0x2, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, @in6=@remote, @in6=@empty, 0x32, 0x3, 0x0, 0x3505, 0xa, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, @in=@remote, @in=@multicast1, 0x32, 0x2, 0x0, 0x0, 0xa, 0x2}, {@in=@local, @in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}, @in6=@mcast1, 0x6c, 0x1, 0x0, 0x3505, 0x2}, {@in6=@local, @in6=@private2, @in6=@remote, @in6=@remote, 0x3c, 0x4, 0x0, 0x3507, 0xa, 0x2}, {@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010101, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x3c, 0x2, 0x0, 0x0, 0x2, 0xa}]}, @offload={0xc, 0x1c, {r4, 0x1}}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x20044010}, 0x40000)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001100)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001200)=0xe8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0, <r6=>0x0}, &(0x7f0000001280)=0xc)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0})
r10 = getuid()
fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000000000d9d02000000", @ANYRES32=r8, @ANYBLOB="02000100", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000020000000000"], 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c667363616368652c64666c746769643d995edc8946b87bf4ab65d90e74d2b0de6e41809f924738ed076276ff67c606051fbbc29c5fb0", @ANYRESHEX=r9, @ANYBLOB=',permit_directio,defcontext=staff_u,uid>', @ANYRESDEC=r8, @ANYBLOB=',measure,subj_role=hugetlbfs\x00,smackfsdef=hugetlbfs\x00,fscontext=user_u,fowner>', @ANYRESDEC=r8, @ANYBLOB=',\x00'])
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f00000012c0)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1, 0xee00}, {}, {0x2, 0x1}, {}, {}, {0x2, 0x8, r5}, {0x2, 0x4, 0xee00}, {0x2, 0x5}, {0x2, 0x3, 0xee00}], {0x4, 0x2}, [{0x8, 0x4, 0xee01}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x4}, {0x8, 0x5, r6}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x3, 0xee00}, {0x8, 0x6, r9}, {0x8, 0x5, 0xee00}], {0x10, 0x4}, {0x20, 0x1}}, 0xbc, 0x3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:00:34 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r2, r1, 0x0, 0xfffffdef)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007aff00000000000000000000fcff000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r8)
io_submit(0x0, 0x4, &(0x7f0000000480)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x7f, 0xffffffffffffffff, &(0x7f00000002c0)="45a2aebf9ee3ca183668ab5aca584bb88b83bd5435d12a0775797b7ccb2ebc5695ab2b1bc8792fba6d26449ff5e84b11c578fdeb6839f3d783386d7ebe35ea1bd12580bd74c97beca6cad7ed9ce07e47cc43c6354c06238e154e4c1f3c246bb34329bda9b6f1ba9b143b4cad05ad21061495bb86cd83a578a0571235439dce6e2dadee87a2cea703eeb9bbd8db73ebd15c4b2b54680ef727d1c71d5ca22a10cda52d0e0622fb58dcc658fae675ccff6f5734f22c4a2207da76315bf14122b043a1ca88488a495e747719ce156b50d2492d2a55d3bff0569d39201e900e32e20645fc0a46982907c227ffce2667e82dea0f89", 0xf2, 0x400}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x2, r4, &(0x7f00000003c0)="30dd15fb95309eb47f4a23a6aab9c21d73116d43273febe031837cf76a6b48fb6bb0a9848b449668cabf446b32d156e65fa88a8d84bffca7bf9d7eb897f08f98899209eacc979353dc4d5320d8b96a549ee426111fcb646b2d174634918307fd15391287c4f54aa9c0cf253cfc471e851290f276192e79d65def29", 0x7b, 0x20, 0x0, 0x1, r6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9, 0x8, r4, &(0x7f0000000180)="5caedc26522b7a", 0x7, 0x8000000000000000, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x3, r7, &(0x7f0000000500)="440412ec3b22be113523b32f783ca6f48992f9d401cb56c6d0091b34c9e7b84700ed0033e579494c9fa6e8fb78afeee0dcdc589e1234103dec52ee0dc41343c51420b1f53fddae53f200e24c2a0e1b8f63444fe2e329eb92c3e66bbd4d9c03554d1c660f7105c091dbd0acc83722f7703f141f21fc2d2e30f9e46d90fc6892d83cf72792c21005099b417243c22e0ef626eb271d0dfb9e531ca862174d3c6645da603b25af3bf97bec65d03ecf81fafb8566cb7915a74a181b99167706d6d45eb56cc40e7642c89a01e9901e7143621a1c21ca88e136efce3ad420d7ba08", 0xde, 0x401, 0x0, 0x2, r8}])

14:00:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

14:00:34 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00"/29], 0xb8}}, 0x0)

14:00:34 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 11)

14:00:34 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x8000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x0, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])

14:00:34 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001800010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2958.580399] loop5: detected capacity change from 0 to 40
[ 2958.642859] loop4: detected capacity change from 0 to 40
[ 2958.650968] loop6: detected capacity change from 0 to 40
[ 2958.663045] loop2: detected capacity change from 0 to 40
[ 2958.664781] loop3: detected capacity change from 0 to 262144
14:00:34 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 12)

[ 2958.835643] syz-executor.6: attempt to access beyond end of device
[ 2958.835643] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2958.837296] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2958.849160] syz-executor.2: attempt to access beyond end of device
[ 2958.849160] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2958.850840] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:00:35 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00"/29], 0xb8}}, 0x0)

14:00:35 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x31, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}, {0x0, 0x11, 0x27fc}], 0x109418, &(0x7f0000000140)=ANY=[])

[ 2958.968803] loop5: detected capacity change from 0 to 40
14:00:35 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26)

14:00:35 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000))

14:00:35 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

14:00:35 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x180000e, 0x12, r0, 0x6c6df000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2959.046500] FAULT_INJECTION: forcing a failure.
[ 2959.046500] name failslab, interval 1, probability 0, space 0, times 0
[ 2959.048034] CPU: 1 PID: 13743 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2959.049074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2959.049917] loop3: detected capacity change from 0 to 39
[ 2959.050139] Call Trace:
[ 2959.050151]  <TASK>
[ 2959.050165]  dump_stack_lvl+0x8f/0xb7
[ 2959.052082]  should_fail_ex.cold+0x5/0xa
[ 2959.052652]  should_failslab+0x9/0x20
[ 2959.053179]  __kmem_cache_alloc_node+0x5b/0x400
[ 2959.053819]  ? vfat_add_entry+0x23a/0x2720
[ 2959.054398]  ? mark_lock.part.0+0xef/0x2f70
[ 2959.054998]  kmalloc_trace+0x26/0x60
[ 2959.055518]  vfat_add_entry+0x23a/0x2720
[ 2959.056084]  ? lock_is_held_type+0xdb/0x130
[ 2959.056676]  ? find_held_lock+0x2c/0x110
[ 2959.057219]  ? lock_release+0x3b6/0x750
[ 2959.057773]  ? current_time+0x79/0x2c0
[ 2959.058346]  ? __pfx_vfat_add_entry+0x10/0x10
14:00:35 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001900010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 2959.058957]  ? mark_held_locks+0x9e/0xe0
[ 2959.059675]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2959.060356]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2959.061017]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2959.061614]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2959.062277]  ? ktime_get_coarse_real_ts64+0x100/0x190
[ 2959.062933]  ? __pfx___mutex_lock+0x10/0x10
[ 2959.063515]  ? current_time+0x201/0x2c0
[ 2959.064053]  ? __pfx_current_time+0x10/0x10
[ 2959.064652]  ? d_splice_alias+0x4eb/0xd50
[ 2959.065204]  vfat_create+0x10c/0x270
[ 2959.065724]  ? vfat_lookup+0x2b5/0x560
[ 2959.066260]  ? __pfx_vfat_create+0x10/0x10
[ 2959.066855]  ? __pfx_vfat_create+0x10/0x10
[ 2959.067417]  lookup_open.isra.0+0xed0/0x1250
[ 2959.068020]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 2959.068719]  path_openat+0x946/0x29b0
[ 2959.069253]  ? __pfx_path_openat+0x10/0x10
[ 2959.069837]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2959.070457]  do_filp_open+0x1ba/0x410
[ 2959.070992]  ? __pfx_do_filp_open+0x10/0x10
[ 2959.071558]  ? find_held_lock+0x2c/0x110
[ 2959.072096]  ? lock_release+0x3b6/0x750
[ 2959.072646]  ? do_raw_spin_lock+0x125/0x270
[ 2959.073230]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2959.073881]  ? _raw_spin_unlock+0x28/0x50
[ 2959.074426]  ? alloc_fd+0x2d8/0x6e0
[ 2959.074944]  do_sys_openat2+0x171/0x4c0
[ 2959.075482]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2959.076087]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2959.076743]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2959.077465]  __x64_sys_openat+0x143/0x200
[ 2959.078031]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2959.078672]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2959.079329]  do_syscall_64+0x3f/0x90
[ 2959.079835]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2959.080508] RIP: 0033:0x7fb98db01b19
[ 2959.081000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2959.083261] RSP: 002b:00007fb98b077188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2959.084230] RAX: ffffffffffffffda RBX: 00007fb98dc14f60 RCX: 00007fb98db01b19
[ 2959.085133] RDX: 00000000000026e1 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 2959.086054] RBP: 00007fb98b0771d0 R08: 0000000000000000 R09: 0000000000000000
[ 2959.086958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2959.087856] R13: 00007fff953514af R14: 00007fb98b077300 R15: 0000000000022000
[ 2959.088790]  </TASK>
[ 2959.173711] loop2: detected capacity change from 0 to 40
[ 2959.188524] loop6: detected capacity change from 0 to 40
14:00:35 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00"/29], 0xb8}}, 0x0)

[ 2959.271090] loop4: detected capacity change from 0 to 40
[ 2959.384707] syz-executor.2: attempt to access beyond end of device
[ 2959.384707] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2959.386898] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2959.464941] syz-executor.6: attempt to access beyond end of device
[ 2959.464941] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2959.466800] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2959.531222] syz-executor.6: attempt to access beyond end of device
[ 2959.531222] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2959.533376] Buffer I/O error on dev loop6, logical block 10, lost async page write
14:00:52 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x8043, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
pwritev(r4, &(0x7f0000001500)=[{&(0x7f00000002c0)="e69cbf3491f7190510ad1fc224b300399e7be949c591277300c031abbf53490fd965f5195a65e624c00c2a2dd993a69ea228e8de6c34e25240b40cc417401528ac95402f2847fb39d4b6eee8d444edd798d23cf2f3cc968d0dea52d1ff04fb74cdb8b4854467876b775cc86b90bb48a3c5fa7515f60e7d66e34c254ea76f43dd97be76b07118f63e6f9a08b13c8ca40235b1726b48cc93916ac76b5cf6104509c61e8c1fd9bd06257066bb20730a0dd9b8fa4b098ad071bb138da3f71ce3a917dd0306057263", 0xc6}, {&(0x7f00000003c0)="124e49f30b55707914321d70348237210835996004db83fa80e494f68824c997650719fa895a3f288ea71951acd51734de42e14f476f429f601c3afeca548eeba6e204d1cff068c04dc88ab632dfc63a1838fbeaba814fea73e6a5e9df360291d497257a398380408b458ba7906b6b579b6d2263ca1bff81de9a3a3df6ac9da3bfa3f931330281c4323042de104c7951cd1a0b61f9f466dbb7da8d63a67c54d53b63b3edf855353d42ba563c8b608bd3a489d26d6d5a73b7724b066f8bf8b22a46155a36d0c5437b2db94a408dffbd70d6a191", 0xd3}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000000)="838c8aa75aa53db615ff0fa6", 0xc}, {&(0x7f00000000c0)='a', 0x1}, {&(0x7f0000000180)}], 0x6, 0x3f, 0x9)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:00:52 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 13)

14:00:52 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x109418, &(0x7f0000000140)=ANY=[])

14:00:52 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:00:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

14:00:52 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27)

14:00:52 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140200001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:00:52 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000"], 0xb8}}, 0x0)

[ 2976.736784] loop6: detected capacity change from 0 to 40
[ 2976.745098] loop5: detected capacity change from 0 to 40
[ 2976.745183] loop2: detected capacity change from 0 to 40
[ 2976.794797] syz-executor.2: attempt to access beyond end of device
[ 2976.794797] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2976.795953] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2976.798103] syz-executor.6: attempt to access beyond end of device
[ 2976.798103] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2976.798998] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2976.805938] loop4: detected capacity change from 0 to 40
14:00:52 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000"], 0xb8}}, 0x0)

14:00:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x109418, &(0x7f0000000140)=ANY=[])

14:00:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28)

14:00:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 14)

[ 2976.968119] loop2: detected capacity change from 0 to 40
14:00:53 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000"], 0xb8}}, 0x0)

14:00:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2977.005923] syz-executor.2: attempt to access beyond end of device
[ 2977.005923] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2977.006891] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2977.042134] loop5: detected capacity change from 0 to 40
[ 2977.073414] FAULT_INJECTION: forcing a failure.
[ 2977.073414] name failslab, interval 1, probability 0, space 0, times 0
[ 2977.074222] CPU: 1 PID: 13798 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2977.074789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2977.075345] Call Trace:
[ 2977.075528]  <TASK>
[ 2977.075695]  dump_stack_lvl+0x8f/0xb7
[ 2977.075986]  should_fail_ex.cold+0x5/0xa
[ 2977.076291]  ? vfat_add_entry+0x2fe/0x2720
[ 2977.076607]  should_failslab+0x9/0x20
[ 2977.076904]  kmem_cache_alloc+0x5a/0x410
[ 2977.077219]  vfat_add_entry+0x2fe/0x2720
[ 2977.077530]  ? lock_is_held_type+0xdb/0x130
[ 2977.077856]  ? find_held_lock+0x2c/0x110
[ 2977.078173]  ? lock_release+0x3b6/0x750
[ 2977.078470]  ? current_time+0x79/0x2c0
[ 2977.078769]  ? __pfx_vfat_add_entry+0x10/0x10
[ 2977.079112]  ? mark_held_locks+0x9e/0xe0
[ 2977.079427]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2977.079799]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2977.080167]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2977.080513]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2977.080893]  ? ktime_get_coarse_real_ts64+0x100/0x190
[ 2977.081268]  ? __pfx___mutex_lock+0x10/0x10
[ 2977.081597]  ? current_time+0x201/0x2c0
[ 2977.081901]  ? __pfx_current_time+0x10/0x10
[ 2977.082242]  ? d_splice_alias+0x4eb/0xd50
[ 2977.082560]  vfat_create+0x10c/0x270
[ 2977.082849]  ? vfat_lookup+0x2b5/0x560
[ 2977.083145]  ? __pfx_vfat_create+0x10/0x10
[ 2977.083486]  ? __pfx_vfat_create+0x10/0x10
[ 2977.083805]  lookup_open.isra.0+0xed0/0x1250
[ 2977.084166]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 2977.084557]  path_openat+0x946/0x29b0
[ 2977.084871]  ? __pfx_path_openat+0x10/0x10
[ 2977.085206]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2977.085564]  do_filp_open+0x1ba/0x410
[ 2977.085853]  ? __pfx_do_filp_open+0x10/0x10
[ 2977.086198]  ? find_held_lock+0x2c/0x110
[ 2977.086520]  ? lock_release+0x3b6/0x750
[ 2977.086825]  ? do_raw_spin_lock+0x125/0x270
[ 2977.087160]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2977.087521]  ? _raw_spin_unlock+0x28/0x50
[ 2977.087835]  ? alloc_fd+0x2d8/0x6e0
[ 2977.088127]  do_sys_openat2+0x171/0x4c0
[ 2977.088444]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2977.088801]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2977.089192]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2977.089613]  __x64_sys_openat+0x143/0x200
[ 2977.089932]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2977.090299]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2977.090682]  do_syscall_64+0x3f/0x90
[ 2977.090966]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2977.091353] RIP: 0033:0x7fb98db01b19
[ 2977.091640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2977.092969] RSP: 002b:00007fb98b077188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2977.093532] RAX: ffffffffffffffda RBX: 00007fb98dc14f60 RCX: 00007fb98db01b19
[ 2977.094069] RDX: 00000000000026e1 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 2977.094598] RBP: 00007fb98b0771d0 R08: 0000000000000000 R09: 0000000000000000
[ 2977.095125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2977.095661] R13: 00007fff953514af R14: 00007fb98b077300 R15: 0000000000022000
[ 2977.096190]  </TASK>
[ 2977.099723] loop6: detected capacity change from 0 to 40
[ 2977.165169] syz-executor.6: attempt to access beyond end of device
[ 2977.165169] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2977.166970] Buffer I/O error on dev loop6, logical block 10, lost async page write
14:01:09 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x109418, &(0x7f0000000140)=ANY=[])

14:01:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000))

14:01:09 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140400001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:01:09 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, 0x1, &(0x7f0000000180)=[{&(0x7f00000002c0)="6f213851e7b7875b39fc7fd3fbff2e7e58eb10ddcddb8f202c93493f64510ec9af4c46e6521d7f59a1aa1fead6b7c046100df12ad2e168595808601fcd2d26dc61927cb1fe19da4c289329460555fc4625c9ddb90ea1949cddfccdce79f247b779dbb5f401ea5166bb96e00c4d36ec2ea0186bb3722e97c0dd63f9a9f05cb76fc570dff0e0bd94a6c96aeb8adff2b5ea1b28fd0657a8e34b81b9d97751a66b843742b2f7c13c671bc71101f2aeeaf5783e2d97378e39ba358f8c09c07379a6a1f06c93ec8369f296b8217a15047d4458916ee79d47f1741e15004bb0aa1a992fda2d5676", 0xe4}], 0x2001800, &(0x7f00000003c0)={[{@nodelalloc}, {@debug}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_user={'obj_user', 0x3d, 'vfat\x00'}}, {@obj_type={'obj_type', 0x3d, '!\'-$/'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@appraise}]})
ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000500)={{0x4, 0x5}, 0x100, './file1\x00'})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r5)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

14:01:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x7a)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendfile(r0, r4, 0x0, 0x7fff)

14:01:09 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100"/50], 0xb8}}, 0x0)

14:01:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 15)

14:01:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29)

[ 2992.931101] loop5: detected capacity change from 0 to 40
[ 2992.937908] loop4: detected capacity change from 0 to 40
[ 2992.950318] loop6: detected capacity change from 0 to 40
[ 2992.997378] loop2: detected capacity change from 0 to 40
14:01:09 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100"/50], 0xb8}}, 0x0)

14:01:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 16)

[ 2993.074289] syz-executor.6: attempt to access beyond end of device
[ 2993.074289] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2993.076157] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2993.094088] loop5: detected capacity change from 0 to 40
[ 2993.105932] FAULT_INJECTION: forcing a failure.
[ 2993.105932] name failslab, interval 1, probability 0, space 0, times 0
[ 2993.106772] CPU: 0 PID: 13834 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2993.107347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2993.107912] Call Trace:
[ 2993.108096]  <TASK>
[ 2993.108276]  dump_stack_lvl+0x8f/0xb7
[ 2993.108564]  should_fail_ex.cold+0x5/0xa
[ 2993.108878]  should_failslab+0x9/0x20
[ 2993.109163]  kmem_cache_alloc_lru+0x6b/0x760
[ 2993.109489]  ? fat_alloc_inode+0x27/0x1f0
[ 2993.109788]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 2993.110167]  ? mutex_lock_io_nested+0x12c0/0x1330
[ 2993.110544]  fat_alloc_inode+0x27/0x1f0
[ 2993.110834]  ? __pfx_fat_alloc_inode+0x10/0x10
[ 2993.111172]  alloc_inode+0x63/0x240
[ 2993.111449]  new_inode+0x25/0x1f0
[ 2993.111718]  fat_build_inode+0x14e/0x2e0
[ 2993.112020]  vfat_create+0x1cd/0x270
[ 2993.112306]  ? vfat_lookup+0x2b5/0x560
[ 2993.112589]  ? __pfx_vfat_create+0x10/0x10
[ 2993.112920]  ? __pfx_vfat_create+0x10/0x10
[ 2993.113227]  lookup_open.isra.0+0xed0/0x1250
[ 2993.113562]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 2993.113946]  path_openat+0x946/0x29b0
[ 2993.114255]  ? __pfx_path_openat+0x10/0x10
[ 2993.114568]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2993.114913]  do_filp_open+0x1ba/0x410
[ 2993.115200]  ? __pfx_do_filp_open+0x10/0x10
[ 2993.115534]  ? find_held_lock+0x2c/0x110
[ 2993.115841]  ? lock_release+0x3b6/0x750
[ 2993.116150]  ? do_raw_spin_lock+0x125/0x270
[ 2993.116472]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2993.116820]  ? _raw_spin_unlock+0x28/0x50
[ 2993.117136]  ? alloc_fd+0x2d8/0x6e0
[ 2993.117419]  do_sys_openat2+0x171/0x4c0
[ 2993.117732]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2993.118086]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2993.118459]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2993.118880]  __x64_sys_openat+0x143/0x200
[ 2993.119185]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2993.119550]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2993.119908]  do_syscall_64+0x3f/0x90
[ 2993.120194]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2993.120566] RIP: 0033:0x7fb98db01b19
[ 2993.120849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2993.122068] RSP: 002b:00007fb98b077188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2993.122626] RAX: ffffffffffffffda RBX: 00007fb98dc14f60 RCX: 00007fb98db01b19
[ 2993.123138] RDX: 00000000000026e1 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 2993.123658] RBP: 00007fb98b0771d0 R08: 0000000000000000 R09: 0000000000000000
[ 2993.124185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2993.124704] R13: 00007fff953514af R14: 00007fb98b077300 R15: 0000000000022000
[ 2993.124988] syz-executor.4: attempt to access beyond end of device
[ 2993.124988] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2993.125238]  </TASK>
[ 2993.127260] Buffer I/O error on dev loop4, logical block 10, lost async page write
14:01:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 17)

[ 2993.173894] syz-executor.6: attempt to access beyond end of device
[ 2993.173894] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2993.175035] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2993.183048] syz-executor.2: attempt to access beyond end of device
[ 2993.183048] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2993.184690] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:01:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x40000, 0x86)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
statfs(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)=""/151)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2993.192656] loop5: detected capacity change from 0 to 40
14:01:09 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000064000440002000d5409763c937f61502802d45ad176d653b6d28228f55bb4a", 0x23}], 0x109418, &(0x7f0000000140)=ANY=[])

14:01:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', <r4=>0x0, 0x4, 0x6, 0x7d, 0x1, 0x40, @mcast2, @mcast1, 0x10, 0x40, 0x7ff, 0x9}})
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=@getsadinfo={0x2b8, 0x23, 0x100, 0x70bd25, 0x25dfdbfd, 0x0, [@algo_comp={0x97, 0x3, {{'lzs\x00'}, 0x278, "77e6d2459dddb052d7269381548d50662b37a69247d998e386459a079d7c71a7c049dca23207f293b7e38cccf7eadf7a7256db7e561c61c7bc0858d9fedd8bd87645165432232e72e10ac4af37f3b7"}}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xa}}, @tfcpad={0x8, 0x16, 0x2}, @migrate={0x1cc, 0x11, [{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x33}, @in=@rand_addr=0x64010101, @in6=@remote, 0x33, 0x4, 0x0, 0x3504, 0x2, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, @in6=@remote, @in6=@empty, 0x32, 0x3, 0x0, 0x3505, 0xa, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, @in=@remote, @in=@multicast1, 0x32, 0x2, 0x0, 0x0, 0xa, 0x2}, {@in=@local, @in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}, @in6=@mcast1, 0x6c, 0x1, 0x0, 0x3505, 0x2}, {@in6=@local, @in6=@private2, @in6=@remote, @in6=@remote, 0x3c, 0x4, 0x0, 0x3507, 0xa, 0x2}, {@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010101, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x3c, 0x2, 0x0, 0x0, 0x2, 0xa}]}, @offload={0xc, 0x1c, {r4, 0x1}}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x20044010}, 0x40000)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001100)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001200)=0xe8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0, <r6=>0x0}, &(0x7f0000001280)=0xc)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0})
r10 = getuid()
fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000000000d9d02000000", @ANYRES32=r8, @ANYBLOB="02000100", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000020000000000"], 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c667363616368652c64666c746769643d995edc8946b87bf4ab65d90e74d2b0de6e41809f924738ed076276ff67c606051fbbc29c5fb0", @ANYRESHEX=r9, @ANYBLOB=',permit_directio,defcontext=staff_u,uid>', @ANYRESDEC=r8, @ANYBLOB=',measure,subj_role=hugetlbfs\x00,smackfsdef=hugetlbfs\x00,fscontext=user_u,fowner>', @ANYRESDEC=r8, @ANYBLOB=',\x00'])
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f00000012c0)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1, 0xee00}, {}, {0x2, 0x1}, {}, {}, {0x2, 0x8, r5}, {0x2, 0x4, 0xee00}, {0x2, 0x5}, {0x2, 0x3, 0xee00}], {0x4, 0x2}, [{0x8, 0x4, 0xee01}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x4}, {0x8, 0x5, r6}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x3, 0xee00}, {0x8, 0x6, r9}, {0x8, 0x5, 0xee00}], {0x10, 0x4}, {0x20, 0x1}}, 0xbc, 0x3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:01:09 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100"/50], 0xb8}}, 0x0)

14:01:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 18)

[ 2993.280584] loop4: detected capacity change from 0 to 40
14:01:09 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="5da31e0d34f535d829be2a7544adff6efb70304157b70443f817f5bf04d43627ee6c7c499eb2d3c3cc2ef30191b6af51d7b724358189e3aef383e86fc43553f5a71eea43fbdce1d6efedf6701018790b249bd1b5e820c5db4b9163d93b60663e76619103d28afe43d1ddafc90d5a57b1c0886a73b5e8cdf5d686d4a28c42ab44fb0828ea37efba6eff6a128301c5c1a8f42d9e80429f5578dd6d561c27ce4f783169a22187cd0229f68dd48ad4be2dc2330d6bc7501f0fcbda5162f26f5e140a303937f00779f4e68b58d2e633b98ec8a41afccc1d01a1d5e95c09ab82f73685a35fe7a27b7061ce648d8ca4be10e75e5a3c0103f6b811ebb28e4b", 0xfb}, {&(0x7f0000000000)="bd050ba51734da2b20169d696af7b5369ca50d804956303aeb8a41a605", 0x1d}, {&(0x7f00000000c0)="1d20a64c58e8c8b3f100c3cb12f4ee822d2138cc3a57d8bfde660c0b9244105a66fb98bd0a42b4db", 0x28}], 0x3, 0x0, 0x0, 0x24000004}, 0x8000)

[ 2993.319602] loop5: detected capacity change from 0 to 40
14:01:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30)

[ 2993.338608] loop6: detected capacity change from 0 to 40
[ 2993.346669] FAULT_INJECTION: forcing a failure.
[ 2993.346669] name failslab, interval 1, probability 0, space 0, times 0
[ 2993.347497] CPU: 0 PID: 13848 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2993.348068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2993.348630] Call Trace:
[ 2993.348822]  <TASK>
[ 2993.348987]  dump_stack_lvl+0x8f/0xb7
[ 2993.349280]  should_fail_ex.cold+0x5/0xa
[ 2993.349587]  ? security_inode_alloc+0x38/0x160
[ 2993.349918]  should_failslab+0x9/0x20
[ 2993.350198]  kmem_cache_alloc+0x5a/0x410
[ 2993.350513]  security_inode_alloc+0x38/0x160
[ 2993.350833]  inode_init_always+0xbb2/0xea0
[ 2993.351135]  ? __init_rwsem+0x12d/0x1b0
[ 2993.351439]  alloc_inode+0x84/0x240
[ 2993.351718]  new_inode+0x25/0x1f0
[ 2993.351990]  fat_build_inode+0x14e/0x2e0
[ 2993.352290]  vfat_create+0x1cd/0x270
[ 2993.352568]  ? vfat_lookup+0x2b5/0x560
[ 2993.352856]  ? __pfx_vfat_create+0x10/0x10
[ 2993.353179]  ? __pfx_vfat_create+0x10/0x10
[ 2993.353490]  lookup_open.isra.0+0xed0/0x1250
[ 2993.353824]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 2993.354208]  path_openat+0x946/0x29b0
[ 2993.354510]  ? __pfx_path_openat+0x10/0x10
[ 2993.354820]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2993.355159]  do_filp_open+0x1ba/0x410
[ 2993.355452]  ? __pfx_do_filp_open+0x10/0x10
[ 2993.355770]  ? find_held_lock+0x2c/0x110
[ 2993.356065]  ? lock_release+0x3b6/0x750
[ 2993.356365]  ? do_raw_spin_lock+0x125/0x270
[ 2993.356691]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2993.357040]  ? _raw_spin_unlock+0x28/0x50
[ 2993.357345]  ? alloc_fd+0x2d8/0x6e0
[ 2993.357638]  do_sys_openat2+0x171/0x4c0
[ 2993.357930]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2993.358288]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2993.358651]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2993.359045]  __x64_sys_openat+0x143/0x200
[ 2993.359346]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2993.359704]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2993.360067]  do_syscall_64+0x3f/0x90
[ 2993.360354]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2993.360721] RIP: 0033:0x7fb98db01b19
[ 2993.360986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2993.362439] RSP: 002b:00007fb98b077188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2993.362965] RAX: ffffffffffffffda RBX: 00007fb98dc14f60 RCX: 00007fb98db01b19
[ 2993.363449] RDX: 00000000000026e1 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 2993.363938] RBP: 00007fb98b0771d0 R08: 0000000000000000 R09: 0000000000000000
[ 2993.364426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2993.364912] R13: 00007fff953514af R14: 00007fb98b077300 R15: 0000000000022000
[ 2993.365417]  </TASK>
[ 2993.367552] syz-executor.4: attempt to access beyond end of device
[ 2993.367552] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2993.368558] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2993.555886] syz-executor.6: attempt to access beyond end of device
[ 2993.555886] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2993.557983] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2993.581932] loop2: detected capacity change from 0 to 40
[ 2993.708084] syz-executor.2: attempt to access beyond end of device
[ 2993.708084] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2993.709982] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:01:10 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140600001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:01:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x4000000000003d19, 0x5, &(0x7f0000000440)=[{&(0x7f0000000180)="1f12b3707eb78f65a4cc9d055a2446d7e880ee37106fa34ea852e39f1d01d13eb328f0413135", 0x26, 0x6}, {&(0x7f00000002c0)="65a1de670703101a06831a0a80d36ffe51a5bfee9ab1d4303c5724b920123371d6a72e78d31b7f8c6b94ed3cb835e4c54639826556697bac0bbc2aabef68108d9e18b393e71f632a2069d0a181499b7468462286c7ac7377e13190b43a6a3ffdb882000028a174b70e9616f3ed9f485ebefb614645182d23152fb7", 0x7b, 0x8}, {&(0x7f0000001640)="0fb8f97ab59d40c37a0cde8d3f111dde41be1bf9f815735d3cb2fc0ab97150243a7fb1b00e7c467e200b4493323100277e806c2623961fe33f72ca8efb5c238866f452ecd5ffe753e4fc41d564b7665e90e72281106fcca4f539a04136915fc114a30548df02114ca88946d3fe36b0481ac0a27b792ae7fc48092d92dce661e005ac629628d5e0d822ff25790fe4bafdee5a193f5bea3f19fc69fe439e276cd9a93afd524b5185f4e9b71f70a9ccdc9b3cf514dfcde41093150a7ee63779fa0c599e2f53be2b8cd4b3d95c9c4f8a86662fbb51b452065892f8e5f275cc1135b098d660539a65c4cfcba5499c24b432d4640d4a84eac3cb10abf033c63751bd6944f3ca62fcbe2f1c1518ef9de254eeb241170162df42b8674733137dc7d34166118ad804ed68f30833dcde81ef41b6698fc7fa9d8d633319fb", 0x139, 0x6b2}, {&(0x7f0000000240)="2e75a06fd2722c85d86087af956d8788651cbdef13f98c", 0x17, 0xff}, {&(0x7f0000000500)="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", 0x1000, 0x9}], 0x8000, &(0x7f0000001500)={[{'vfat\x00'}, {')'}, {'[(\xc4$&$,'}], [{@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}]})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:01:10 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100"/54], 0xb8}}, 0x0)

14:01:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x109418, &(0x7f0000000140)=ANY=[])

14:01:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 19)

14:01:10 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x1c7ec0, 0x0)
pwritev(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)="a72f6ce621ccccff4de7e89c41a268c870aa3c0880ef4ccb4b8cd4aafa5c909d65beb4bac350ff6187efda89a56d40a7d8169a85611a1438a63dedea15b4d061613842de287d43a04fe30858e7098ad4fb58af2ad40160ce45f1d8efe05a8fec3b30b048916ea3049e3a4efca31590646df93fe28dadc04a88f05e10910644d902f3699fefc356e45b4b1dd2f06fc64279e83a10c2deeee3c4fab106a30406df26c1e02d5ea76084ffd1965b757db717f1a29478426ffa509a8d0ca9749b98790ee66a32332904a1e858c016abea", 0xce}, {&(0x7f00000003c0)="dea8ca97e7be519840e1b1", 0xb}, {&(0x7f0000000400)="f2763363cdbc0c5e196a88b57cafcd599af67cdac3b451c74089a9375161d9083b93d404172199b238ecd54d0ab6f8df9e8490fc61bda7a06e8c90932c974aca52ff6065ab08ea02d0cd114e7d9e28fa11df05142d9731a61b88553f53ba0e0f622ea619c47cefef9f0d656bb01e222098b280470eb879df3510adf8138921407bdb754d96b62cd34601ff7fa094fa565b093cd28632ed774e", 0x99}, {&(0x7f0000000500)="d4a003fc32e0de5b0d461b3a640899d7bd6bce0747cfbb0555517e0fff9d780923dd9586fb1da40950ae2b48e699fa975713244d5c1060ac6b6e05ad838327eeb702c2d5a0e0a494943c0d82ee3f1dba2de240d5f051cdc5d13f3fbc49b143bebbaf69f4cda0e709379875415f81a386", 0x70}], 0x4, 0xac, 0x9)
creat(&(0x7f0000000240)='./file1\x00', 0x28)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat(0xffffffffffffffff, &(0x7f00000005c0)='./file1\x00', 0x2, 0xc4)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:01:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31)

[ 2994.030813] loop6: detected capacity change from 0 to 40
[ 2994.031277] loop4: detected capacity change from 0 to 40
[ 2994.062229] loop5: detected capacity change from 0 to 40
[ 2994.070804] loop2: detected capacity change from 0 to 40
14:01:10 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100"/54], 0xb8}}, 0x0)

[ 2994.103840] FAULT_INJECTION: forcing a failure.
[ 2994.103840] name failslab, interval 1, probability 0, space 0, times 0
[ 2994.104740] CPU: 0 PID: 13873 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2994.105292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2994.105939] Call Trace:
[ 2994.106126]  <TASK>
[ 2994.106308]  dump_stack_lvl+0x8f/0xb7
[ 2994.106586]  should_fail_ex.cold+0x5/0xa
[ 2994.106885]  ? security_inode_alloc+0x38/0x160
[ 2994.107210]  should_failslab+0x9/0x20
[ 2994.107485]  kmem_cache_alloc+0x5a/0x410
[ 2994.107786]  security_inode_alloc+0x38/0x160
[ 2994.108098]  inode_init_always+0xbb2/0xea0
[ 2994.108426]  ? __init_rwsem+0x12d/0x1b0
[ 2994.108736]  alloc_inode+0x84/0x240
[ 2994.109029]  new_inode+0x25/0x1f0
[ 2994.109316]  fat_build_inode+0x14e/0x2e0
[ 2994.109610]  vfat_create+0x1cd/0x270
[ 2994.109879]  ? vfat_lookup+0x2b5/0x560
[ 2994.110165]  ? __pfx_vfat_create+0x10/0x10
[ 2994.110512]  ? __pfx_vfat_create+0x10/0x10
[ 2994.110837]  lookup_open.isra.0+0xed0/0x1250
[ 2994.111165]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 2994.111541]  path_openat+0x946/0x29b0
[ 2994.111841]  ? __pfx_path_openat+0x10/0x10
[ 2994.112148]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2994.112500]  do_filp_open+0x1ba/0x410
[ 2994.112794]  ? __pfx_do_filp_open+0x10/0x10
[ 2994.113129]  ? find_held_lock+0x2c/0x110
[ 2994.113449]  ? lock_release+0x3b6/0x750
[ 2994.113773]  ? do_raw_spin_lock+0x125/0x270
[ 2994.114106]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2994.114498]  ? _raw_spin_unlock+0x28/0x50
[ 2994.114822]  ? alloc_fd+0x2d8/0x6e0
[ 2994.115124]  do_sys_openat2+0x171/0x4c0
[ 2994.115436]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2994.115788]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 2994.116165]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 2994.116592]  __x64_sys_openat+0x143/0x200
[ 2994.116919]  ? __pfx___x64_sys_openat+0x10/0x10
[ 2994.117292]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2994.117677]  do_syscall_64+0x3f/0x90
[ 2994.117969]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2994.118357] RIP: 0033:0x7fb98db01b19
[ 2994.118639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2994.119951] RSP: 002b:00007fb98b077188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2994.120514] RAX: ffffffffffffffda RBX: 00007fb98dc14f60 RCX: 00007fb98db01b19
[ 2994.121032] RDX: 00000000000026e1 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 2994.121551] RBP: 00007fb98b0771d0 R08: 0000000000000000 R09: 0000000000000000
[ 2994.122059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2994.122580] R13: 00007fff953514af R14: 00007fb98b077300 R15: 0000000000022000
[ 2994.123125]  </TASK>
[ 2994.157663] syz-executor.2: attempt to access beyond end of device
[ 2994.157663] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2994.158875] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2994.176507] syz-executor.4: attempt to access beyond end of device
[ 2994.176507] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2994.177567] Buffer I/O error on dev loop4, logical block 10, lost async page write
14:01:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[])

[ 2994.331712] FAT-fs (loop3): bogus number of reserved sectors
[ 2994.332298] FAT-fs (loop3): Can't find a valid FAT filesystem
14:01:25 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140800001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:01:25 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100"/54], 0xb8}}, 0x0)

[ 3009.756506] loop5: detected capacity change from 0 to 40
14:01:25 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (fail_nth: 20)

14:01:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[])

14:01:25 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000180)={@initdev, @empty, <r3=>0x0}, &(0x7f0000000240)=0xc)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)=@newpolicy={0x144, 0x13, 0x300, 0x70bd2a, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x4e23, 0x589, 0x4e24, 0x1315, 0x2, 0x30, 0x0, 0x3b, r3, 0xee00}, {0x9, 0x6e6, 0x4, 0x1000, 0x80000001, 0x0, 0x401, 0x100000001}, {0x96f5, 0x100000001, 0x3, 0x8}, 0x5, 0x6e6bbc, 0x2, 0x0, 0x1, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@local, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3501, 0x2, 0x3, 0x6, 0x1, 0x5, 0xfd}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x3504, 0x1, 0x2, 0xec, 0x2, 0xd5f, 0x6}]}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:01:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x1c7ec0, 0x0)
pwritev(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)="a72f6ce621ccccff4de7e89c41a268c870aa3c0880ef4ccb4b8cd4aafa5c909d65beb4bac350ff6187efda89a56d40a7d8169a85611a1438a63dedea15b4d061613842de287d43a04fe30858e7098ad4fb58af2ad40160ce45f1d8efe05a8fec3b30b048916ea3049e3a4efca31590646df93fe28dadc04a88f05e10910644d902f3699fefc356e45b4b1dd2f06fc64279e83a10c2deeee3c4fab106a30406df26c1e02d5ea76084ffd1965b757db717f1a29478426ffa509a8d0ca9749b98790ee66a32332904a1e858c016abea", 0xce}, {&(0x7f00000003c0)="dea8ca97e7be519840e1b1", 0xb}, {&(0x7f0000000400)="f2763363cdbc0c5e196a88b57cafcd599af67cdac3b451c74089a9375161d9083b93d404172199b238ecd54d0ab6f8df9e8490fc61bda7a06e8c90932c974aca52ff6065ab08ea02d0cd114e7d9e28fa11df05142d9731a61b88553f53ba0e0f622ea619c47cefef9f0d656bb01e222098b280470eb879df3510adf8138921407bdb754d96b62cd34601ff7fa094fa565b093cd28632ed774e", 0x99}, {&(0x7f0000000500)="d4a003fc32e0de5b0d461b3a640899d7bd6bce0747cfbb0555517e0fff9d780923dd9586fb1da40950ae2b48e699fa975713244d5c1060ac6b6e05ad838327eeb702c2d5a0e0a494943c0d82ee3f1dba2de240d5f051cdc5d13f3fbc49b143bebbaf69f4cda0e709379875415f81a386", 0x70}], 0x4, 0xac, 0x9)
creat(&(0x7f0000000240)='./file1\x00', 0x28)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat(0xffffffffffffffff, &(0x7f00000005c0)='./file1\x00', 0x2, 0xc4)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:01:25 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0)
syncfs(r3)
faccessat(r3, &(0x7f0000000000)='./file1\x00', 0x90)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
ftruncate(r0, 0x5)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = io_uring_setup(0x34c1, &(0x7f00000002c0)={0x0, 0x8ec8, 0x4, 0x0, 0x329, 0x0, r1})
signalfd4(r5, &(0x7f00000000c0)={[0x9]}, 0x8, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r6)
sendfile(r2, r1, 0x0, 0xfffffdef)

14:01:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32)

14:01:25 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100"/56], 0xb8}}, 0x0)

[ 3009.786647] FAULT_INJECTION: forcing a failure.
[ 3009.786647] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3009.787807] CPU: 1 PID: 13900 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221207 #1
[ 3009.788439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3009.789026] Call Trace:
[ 3009.789234]  <TASK>
[ 3009.789427]  dump_stack_lvl+0x8f/0xb7
[ 3009.789719]  should_fail_ex.cold+0x5/0xa
[ 3009.790026]  _copy_to_user+0x30/0x1c0
[ 3009.790323]  simple_read_from_buffer+0xd0/0x170
[ 3009.790680]  proc_fail_nth_read+0x19c/0x230
[ 3009.790997]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3009.791350]  ? security_file_permission+0xb5/0xe0
[ 3009.791717]  vfs_read+0x2e1/0x9f0
[ 3009.791986]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3009.792345]  ? __pfx_vfs_read+0x10/0x10
[ 3009.792653]  ? __fget_files+0x270/0x450
[ 3009.792965]  ksys_read+0x12b/0x260
[ 3009.793235]  ? __pfx_ksys_read+0x10/0x10
[ 3009.793549]  ? rcu_read_lock_sched_held+0x42/0x80
[ 3009.793908]  do_syscall_64+0x3f/0x90
[ 3009.794182]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3009.794562] RIP: 0033:0x7fb98dab469c
[ 3009.794831] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 3009.796047] RSP: 002b:00007fb98b077170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3009.796573] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fb98dab469c
[ 3009.797088] RDX: 000000000000000f RSI: 00007fb98b0771e0 RDI: 0000000000000004
[ 3009.797603] RBP: 00007fb98b0771d0 R08: 0000000000000000 R09: 0000000000000000
[ 3009.798095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3009.798610] R13: 00007fff953514af R14: 00007fb98b077300 R15: 0000000000022000
[ 3009.799114]  </TASK>
[ 3009.804936] loop4: detected capacity change from 0 to 40
[ 3009.822875] loop2: detected capacity change from 0 to 40
[ 3009.832162] loop6: detected capacity change from 0 to 40
14:01:26 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100"/56], 0xb8}}, 0x0)

[ 3009.879179] FAT-fs (loop3): bogus number of reserved sectors
[ 3009.879786] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 3009.940438] syz-executor.2: attempt to access beyond end of device
[ 3009.940438] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3009.941320] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:01:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x1c7ec0, 0x0)
pwritev(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)="a72f6ce621ccccff4de7e89c41a268c870aa3c0880ef4ccb4b8cd4aafa5c909d65beb4bac350ff6187efda89a56d40a7d8169a85611a1438a63dedea15b4d061613842de287d43a04fe30858e7098ad4fb58af2ad40160ce45f1d8efe05a8fec3b30b048916ea3049e3a4efca31590646df93fe28dadc04a88f05e10910644d902f3699fefc356e45b4b1dd2f06fc64279e83a10c2deeee3c4fab106a30406df26c1e02d5ea76084ffd1965b757db717f1a29478426ffa509a8d0ca9749b98790ee66a32332904a1e858c016abea", 0xce}, {&(0x7f00000003c0)="dea8ca97e7be519840e1b1", 0xb}, {&(0x7f0000000400)="f2763363cdbc0c5e196a88b57cafcd599af67cdac3b451c74089a9375161d9083b93d404172199b238ecd54d0ab6f8df9e8490fc61bda7a06e8c90932c974aca52ff6065ab08ea02d0cd114e7d9e28fa11df05142d9731a61b88553f53ba0e0f622ea619c47cefef9f0d656bb01e222098b280470eb879df3510adf8138921407bdb754d96b62cd34601ff7fa094fa565b093cd28632ed774e", 0x99}, {&(0x7f0000000500)="d4a003fc32e0de5b0d461b3a640899d7bd6bce0747cfbb0555517e0fff9d780923dd9586fb1da40950ae2b48e699fa975713244d5c1060ac6b6e05ad838327eeb702c2d5a0e0a494943c0d82ee3f1dba2de240d5f051cdc5d13f3fbc49b143bebbaf69f4cda0e709379875415f81a386", 0x70}], 0x4, 0xac, 0x9)
creat(&(0x7f0000000240)='./file1\x00', 0x28)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat(0xffffffffffffffff, &(0x7f00000005c0)='./file1\x00', 0x2, 0xc4)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3009.982895] syz-executor.6: attempt to access beyond end of device
[ 3009.982895] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3009.984013] Buffer I/O error on dev loop6, logical block 10, lost async page write
14:01:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

14:01:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[])

14:01:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33)

[ 3010.096452] loop4: detected capacity change from 0 to 40
14:01:26 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100"/56], 0xb8}}, 0x0)

[ 3010.111966] loop5: detected capacity change from 0 to 40
14:01:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x320240, 0x145)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3010.160912] FAT-fs (loop3): bogus number of reserved sectors
[ 3010.161396] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 3010.181041] loop2: detected capacity change from 0 to 40
[ 3010.271037] syz-executor.2: attempt to access beyond end of device
[ 3010.271037] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3010.272888] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3010.306608] loop6: detected capacity change from 0 to 40
[ 3010.397921] syz-executor.6: attempt to access beyond end of device
[ 3010.397921] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3010.398877] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3010.412817] syz-executor.6: attempt to access beyond end of device
[ 3010.412817] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3010.413803] Buffer I/O error on dev loop6, logical block 10, lost async page write
14:01:46 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34)

14:01:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x2)

14:01:46 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x109418, 0x0)

14:01:46 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a84d20081eb321fc89137152534b15e6558b48d16f030a990275ba2242c2609ac43961f7b22eb7bf1e62046b6f3228e99bde6050ed27b36ba03aec4a65f9b42994db0dadf44aec9985743c5806ec9542754dd83bf00faabac9762"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:01:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x1c7ec0, 0x0)
pwritev(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)="a72f6ce621ccccff4de7e89c41a268c870aa3c0880ef4ccb4b8cd4aafa5c909d65beb4bac350ff6187efda89a56d40a7d8169a85611a1438a63dedea15b4d061613842de287d43a04fe30858e7098ad4fb58af2ad40160ce45f1d8efe05a8fec3b30b048916ea3049e3a4efca31590646df93fe28dadc04a88f05e10910644d902f3699fefc356e45b4b1dd2f06fc64279e83a10c2deeee3c4fab106a30406df26c1e02d5ea76084ffd1965b757db717f1a29478426ffa509a8d0ca9749b98790ee66a32332904a1e858c016abea", 0xce}, {&(0x7f00000003c0)="dea8ca97e7be519840e1b1", 0xb}, {&(0x7f0000000400)="f2763363cdbc0c5e196a88b57cafcd599af67cdac3b451c74089a9375161d9083b93d404172199b238ecd54d0ab6f8df9e8490fc61bda7a06e8c90932c974aca52ff6065ab08ea02d0cd114e7d9e28fa11df05142d9731a61b88553f53ba0e0f622ea619c47cefef9f0d656bb01e222098b280470eb879df3510adf8138921407bdb754d96b62cd34601ff7fa094fa565b093cd28632ed774e", 0x99}, {&(0x7f0000000500)="d4a003fc32e0de5b0d461b3a640899d7bd6bce0747cfbb0555517e0fff9d780923dd9586fb1da40950ae2b48e699fa975713244d5c1060ac6b6e05ad838327eeb702c2d5a0e0a494943c0d82ee3f1dba2de240d5f051cdc5d13f3fbc49b143bebbaf69f4cda0e709379875415f81a386", 0x70}], 0x4, 0xac, 0x9)
creat(&(0x7f0000000240)='./file1\x00', 0x28)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat(0xffffffffffffffff, &(0x7f00000005c0)='./file1\x00', 0x2, 0xc4)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:01:46 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x320240, 0x145)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:01:46 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
acct(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r4 = signalfd(r2, &(0x7f0000000000)={[0xfffffffffffffff8]}, 0x8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x6}}, './file1\x00'})
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:01:46 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140a00001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 3030.007841] loop6: detected capacity change from 0 to 40
[ 3030.015726] loop5: detected capacity change from 0 to 40
[ 3030.028783] loop4: detected capacity change from 0 to 40
[ 3030.037869] loop2: detected capacity change from 0 to 40
14:01:46 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x109418, 0x0)

[ 3030.167817] syz-executor.6: attempt to access beyond end of device
[ 3030.167817] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3030.169657] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3030.289587] syz-executor.2: attempt to access beyond end of device
[ 3030.289587] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3030.292221] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:01:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x3)

14:01:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x1c7ec0, 0x0)
pwritev(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)="a72f6ce621ccccff4de7e89c41a268c870aa3c0880ef4ccb4b8cd4aafa5c909d65beb4bac350ff6187efda89a56d40a7d8169a85611a1438a63dedea15b4d061613842de287d43a04fe30858e7098ad4fb58af2ad40160ce45f1d8efe05a8fec3b30b048916ea3049e3a4efca31590646df93fe28dadc04a88f05e10910644d902f3699fefc356e45b4b1dd2f06fc64279e83a10c2deeee3c4fab106a30406df26c1e02d5ea76084ffd1965b757db717f1a29478426ffa509a8d0ca9749b98790ee66a32332904a1e858c016abea", 0xce}, {&(0x7f00000003c0)="dea8ca97e7be519840e1b1", 0xb}, {&(0x7f0000000400)="f2763363cdbc0c5e196a88b57cafcd599af67cdac3b451c74089a9375161d9083b93d404172199b238ecd54d0ab6f8df9e8490fc61bda7a06e8c90932c974aca52ff6065ab08ea02d0cd114e7d9e28fa11df05142d9731a61b88553f53ba0e0f622ea619c47cefef9f0d656bb01e222098b280470eb879df3510adf8138921407bdb754d96b62cd34601ff7fa094fa565b093cd28632ed774e", 0x99}, {&(0x7f0000000500)="d4a003fc32e0de5b0d461b3a640899d7bd6bce0747cfbb0555517e0fff9d780923dd9586fb1da40950ae2b48e699fa975713244d5c1060ac6b6e05ad838327eeb702c2d5a0e0a494943c0d82ee3f1dba2de240d5f051cdc5d13f3fbc49b143bebbaf69f4cda0e709379875415f81a386", 0x70}], 0x4, 0xac, 0x9)
creat(&(0x7f0000000240)='./file1\x00', 0x28)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat(0xffffffffffffffff, &(0x7f00000005c0)='./file1\x00', 0x2, 0xc4)
syncfs(r3)

14:01:46 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f00000002c0)={0x0, 0xfb, 0xb0, 0x7, 0x9, "6bdf1876dfee6a81c01aeda5f356b6a7", "03fde9036152ed2d6b4154d02db036609519788d2e6b5e034c19ea6e376b52b092807b018bce79a9a4bcd7e7a1e20bbc31aafe42f5b6f00572fecd771b3ad82d024fcb6a636eb1201d148105676188b17eadfe1f7177aac3f4d2af0bc749edd5635b79da755646697d6bccf95a092741513ea8f92cb7c26af1de461be235fc9a63687a1bdde87edc40a03c142c0b0576c2d9c1883b3634c8698d19"}, 0xb0, 0x5)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3030.461635] loop5: detected capacity change from 0 to 40
[ 3030.577074] loop4: detected capacity change from 0 to 40
[ 3030.649604] loop6: detected capacity change from 0 to 40
[ 3030.833428] syz-executor.6: attempt to access beyond end of device
[ 3030.833428] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3030.835201] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3030.874227] syz-executor.6: attempt to access beyond end of device
[ 3030.874227] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3030.876300] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3031.097773] Process accounting resumed
14:02:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35)

14:02:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x4)

14:02:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001400010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:02:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002080f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendfile(r2, r0, &(0x7f0000000180), 0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000001600)={0x0, 0x80, 0x8, 0x92, 0x8, 0xb2, 0x0, 0x8000, 0xa0040, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000480), 0x6}, 0x12840, 0x2, 0x9, 0x5, 0x5, 0x9, 0x4d, 0x0, 0x5, 0x0, 0x6}, 0xffffffffffffffff, 0x10, r0, 0x1)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f00000000c0)="9e717c3ef38cd0f8d911b5dc00afe71377604fa089504d0b5c4331d4c05076accfc366e32d770b199db1da2905a66988865f09ec02909f", 0x37}, {&(0x7f0000000200)="1f4f2d2c54e5154aa9acdd6e20da66f8220eb9cd076d5e92679e2cb2446a5862162e800601c59f16a2220fd8f102d197a570de56512ba39e9b39da3ce71df247acefb2", 0x43}, {&(0x7f00000002c0)="52f1d6ea771dae0798129dc84e2e8274fb6c52d48fe528e72459f367c3fe78e0be3156119a57dda94c10bd6bf3f685dd1915059a89ecf91b32b7395489ed8b693aee0b60a702d57ec0c1d8aa0ed25169fbc5c63cdff992f7a2fddf1657c8f1a9b160c2d0eb347c8f50e12086f496c099b86c1b7674f62366f2ed15d4", 0x7c}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000340)="ac63ec5c188ed7ca1d360be9a81604c716cdd84801ab3058ad24d0e6d96b3c18fa4eb086fe1d2a0279d5d03114f407128775868d49a19daafe2ed39561ad0b4498aa68785f14f530c5ad1e29aadb7e8bbda584a804b2eef4356fb282eeb0d08d6c337f3097b66c9af5adc8951e3ed7cca24920cb84bad3f040d4ae786a8339b14769ee", 0x83}, {&(0x7f0000001500)="d56d1c9600d63cc0a414cb70860ba2cd88b10afe36b5320a8546f5a7a83b842d7b2d7974c7a675f73da874b5fc5bffd51652a53971383d038de72e98f5d0644c979d0a661913088151522eda9ca428a698514c7389046333555bfa14bd618265dc20089f75729523c6a527163d93a0e725ffc26ad3b0d6aabadc0d765f20a36fdb260a0b78a060bca2938ad24a29dd56862dfacc8ee8f464593bff89043bbfabd8b4d8bf8d0db5183fd9474af4b88cbe75789841100eae749477c44ec4c937eafca10636d64071104c9aea79de500d767a0592b3f519729507c589ff03e723bd55c6f65989", 0xe5}], 0x6, 0xfff, 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r5)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:02:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x1c7ec0, 0x0)
pwritev(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)="a72f6ce621ccccff4de7e89c41a268c870aa3c0880ef4ccb4b8cd4aafa5c909d65beb4bac350ff6187efda89a56d40a7d8169a85611a1438a63dedea15b4d061613842de287d43a04fe30858e7098ad4fb58af2ad40160ce45f1d8efe05a8fec3b30b048916ea3049e3a4efca31590646df93fe28dadc04a88f05e10910644d902f3699fefc356e45b4b1dd2f06fc64279e83a10c2deeee3c4fab106a30406df26c1e02d5ea76084ffd1965b757db717f1a29478426ffa509a8d0ca9749b98790ee66a32332904a1e858c016abea", 0xce}, {&(0x7f00000003c0)="dea8ca97e7be519840e1b1", 0xb}, {&(0x7f0000000400)="f2763363cdbc0c5e196a88b57cafcd599af67cdac3b451c74089a9375161d9083b93d404172199b238ecd54d0ab6f8df9e8490fc61bda7a06e8c90932c974aca52ff6065ab08ea02d0cd114e7d9e28fa11df05142d9731a61b88553f53ba0e0f622ea619c47cefef9f0d656bb01e222098b280470eb879df3510adf8138921407bdb754d96b62cd34601ff7fa094fa565b093cd28632ed774e", 0x99}, {&(0x7f0000000500)="d4a003fc32e0de5b0d461b3a640899d7bd6bce0747cfbb0555517e0fff9d780923dd9586fb1da40950ae2b48e699fa975713244d5c1060ac6b6e05ad838327eeb702c2d5a0e0a494943c0d82ee3f1dba2de240d5f051cdc5d13f3fbc49b143bebbaf69f4cda0e709379875415f81a386", 0x70}], 0x4, 0xac, 0x9)
creat(&(0x7f0000000240)='./file1\x00', 0x28)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat(0xffffffffffffffff, &(0x7f00000005c0)='./file1\x00', 0x2, 0xc4)

14:02:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000007f8c000100000000000002000000000000000000000000000a47352f9d2bdf3b9d92553d099e6eaae69a3efc5cf377825f655e7bb9071b50e97412234bed613a1f17fbb81d230f742f3012e1ff11e432e7eebf72d77fa06b29cdd6c8732319f4cdb8414dbd858be298b8d7d96d88c6c50c6b0c779a6c44b266066c5cb974ce52b90072632a910708b66ddec87f18f341680000000000100000009159f88e8759712e690a7131c130254200e1d8ef3fc6b53d3714a03223bd105d1e7cea"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:02:05 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="141400001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:02:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x109418, 0x0)

[ 3049.149445] loop5: detected capacity change from 0 to 40
[ 3049.153850] loop6: detected capacity change from 0 to 40
[ 3049.179901] loop4: detected capacity change from 0 to 40
[ 3049.180964] loop2: detected capacity change from 0 to 40
[ 3049.306536] syz-executor.6: attempt to access beyond end of device
[ 3049.306536] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3049.308404] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3049.331797] syz-executor.2: attempt to access beyond end of device
[ 3049.331797] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3049.333519] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:02:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x5)

14:02:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001200010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 3049.530145] loop5: detected capacity change from 0 to 40
14:02:23 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14f000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:02:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x1c7ec0, 0x0)
pwritev(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)="a72f6ce621ccccff4de7e89c41a268c870aa3c0880ef4ccb4b8cd4aafa5c909d65beb4bac350ff6187efda89a56d40a7d8169a85611a1438a63dedea15b4d061613842de287d43a04fe30858e7098ad4fb58af2ad40160ce45f1d8efe05a8fec3b30b048916ea3049e3a4efca31590646df93fe28dadc04a88f05e10910644d902f3699fefc356e45b4b1dd2f06fc64279e83a10c2deeee3c4fab106a30406df26c1e02d5ea76084ffd1965b757db717f1a29478426ffa509a8d0ca9749b98790ee66a32332904a1e858c016abea", 0xce}, {&(0x7f00000003c0)="dea8ca97e7be519840e1b1", 0xb}, {&(0x7f0000000400)="f2763363cdbc0c5e196a88b57cafcd599af67cdac3b451c74089a9375161d9083b93d404172199b238ecd54d0ab6f8df9e8490fc61bda7a06e8c90932c974aca52ff6065ab08ea02d0cd114e7d9e28fa11df05142d9731a61b88553f53ba0e0f622ea619c47cefef9f0d656bb01e222098b280470eb879df3510adf8138921407bdb754d96b62cd34601ff7fa094fa565b093cd28632ed774e", 0x99}, {&(0x7f0000000500)="d4a003fc32e0de5b0d461b3a640899d7bd6bce0747cfbb0555517e0fff9d780923dd9586fb1da40950ae2b48e699fa975713244d5c1060ac6b6e05ad838327eeb702c2d5a0e0a494943c0d82ee3f1dba2de240d5f051cdc5d13f3fbc49b143bebbaf69f4cda0e709379875415f81a386", 0x70}], 0x4, 0xac, 0x9)
creat(&(0x7f0000000240)='./file1\x00', 0x28)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

14:02:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000180)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x7}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
fallocate(0xffffffffffffffff, 0x40, 0x8, 0x3)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0))
syncfs(r4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x5, 0x7fffffff}}, './file1\x00'})

14:02:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000003000007f8c000000000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syz_io_uring_setup(0x35f0, &(0x7f00000002c0)={0x0, 0xf458, 0x1, 0x3, 0xf0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000000c0))
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:02:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36)

14:02:23 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq={'euid', 0x3d, r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:02:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x6)

14:02:23 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x5)

[ 3067.598992] loop3: detected capacity change from 0 to 40
[ 3067.606496] loop5: detected capacity change from 0 to 40
[ 3067.616273] loop2: detected capacity change from 0 to 40
[ 3067.619390] loop4: detected capacity change from 0 to 40
[ 3067.622045] loop6: detected capacity change from 0 to 40
[ 3067.674820] syz-executor.6: attempt to access beyond end of device
[ 3067.674820] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3067.675818] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3067.726471] syz-executor.2: attempt to access beyond end of device
[ 3067.726471] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3067.727544] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:02:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x1c7ec0, 0x0)
pwritev(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)="a72f6ce621ccccff4de7e89c41a268c870aa3c0880ef4ccb4b8cd4aafa5c909d65beb4bac350ff6187efda89a56d40a7d8169a85611a1438a63dedea15b4d061613842de287d43a04fe30858e7098ad4fb58af2ad40160ce45f1d8efe05a8fec3b30b048916ea3049e3a4efca31590646df93fe28dadc04a88f05e10910644d902f3699fefc356e45b4b1dd2f06fc64279e83a10c2deeee3c4fab106a30406df26c1e02d5ea76084ffd1965b757db717f1a29478426ffa509a8d0ca9749b98790ee66a32332904a1e858c016abea", 0xce}, {&(0x7f00000003c0)="dea8ca97e7be519840e1b1", 0xb}, {&(0x7f0000000400)="f2763363cdbc0c5e196a88b57cafcd599af67cdac3b451c74089a9375161d9083b93d404172199b238ecd54d0ab6f8df9e8490fc61bda7a06e8c90932c974aca52ff6065ab08ea02d0cd114e7d9e28fa11df05142d9731a61b88553f53ba0e0f622ea619c47cefef9f0d656bb01e222098b280470eb879df3510adf8138921407bdb754d96b62cd34601ff7fa094fa565b093cd28632ed774e", 0x99}, {&(0x7f0000000500)="d4a003fc32e0de5b0d461b3a640899d7bd6bce0747cfbb0555517e0fff9d780923dd9586fb1da40950ae2b48e699fa975713244d5c1060ac6b6e05ad838327eeb702c2d5a0e0a494943c0d82ee3f1dba2de240d5f051cdc5d13f3fbc49b143bebbaf69f4cda0e709379875415f81a386", 0x70}], 0x4, 0xac, 0x9)
creat(&(0x7f0000000240)='./file1\x00', 0x28)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

14:02:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x7)

[ 3067.795577] syz-executor.3: attempt to access beyond end of device
[ 3067.795577] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3067.796406] Buffer I/O error on dev loop3, logical block 10, lost async page write
14:02:23 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x5)

14:02:23 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat2(r0, &(0x7f0000000000)='./file2\x00', &(0x7f00000000c0)={0x1, 0x147, 0x11}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, @out_args}, './file1\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000100000011000a412bbab5f77d4d932d4b8e77f660a67bfd7bb07105f133d484c8ffa808a533b2efb8a6a7ed1f1c9845313acc22c332d766d0303d3b"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:02:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37)

[ 3067.872559] loop4: detected capacity change from 0 to 40
[ 3067.910594] loop5: detected capacity change from 0 to 40
14:02:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq={'euid', 0x3d, r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

[ 3068.056914] loop6: detected capacity change from 0 to 40
[ 3068.065691] loop2: detected capacity change from 0 to 40
[ 3068.152995] syz-executor.6: attempt to access beyond end of device
[ 3068.152995] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3068.153899] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3068.232466] syz-executor.2: attempt to access beyond end of device
[ 3068.232466] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3068.234420] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3068.241066] loop3: detected capacity change from 0 to 40
[ 3068.401771] syz-executor.3: attempt to access beyond end of device
[ 3068.401771] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3068.403409] Buffer I/O error on dev loop3, logical block 10, lost async page write
14:02:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x5)

14:02:40 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="144e02001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:02:40 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x5, 0xaaaaaaaaaaaac00, &(0x7f00000000c0), 0x410, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8001300190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000abbafe6fa7d93a6d25fb8d565e263ed6ad230555ad1878c4f1784ecbedadf5a8a9013eb5c38bb0559b1f700c7d28052a4608cf8c200d5694266934aaf7498982f70eb41801be40dc4ac88496643cf39712889f75840da4f7c05d94061cb7b31e4811104330fc270dc44e417f6371a3e2f"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRESOCT], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3083.970977] loop5: detected capacity change from 0 to 40
14:02:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x1c7ec0, 0x0)
pwritev(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)="a72f6ce621ccccff4de7e89c41a268c870aa3c0880ef4ccb4b8cd4aafa5c909d65beb4bac350ff6187efda89a56d40a7d8169a85611a1438a63dedea15b4d061613842de287d43a04fe30858e7098ad4fb58af2ad40160ce45f1d8efe05a8fec3b30b048916ea3049e3a4efca31590646df93fe28dadc04a88f05e10910644d902f3699fefc356e45b4b1dd2f06fc64279e83a10c2deeee3c4fab106a30406df26c1e02d5ea76084ffd1965b757db717f1a29478426ffa509a8d0ca9749b98790ee66a32332904a1e858c016abea", 0xce}, {&(0x7f00000003c0)="dea8ca97e7be519840e1b1", 0xb}, {&(0x7f0000000400)="f2763363cdbc0c5e196a88b57cafcd599af67cdac3b451c74089a9375161d9083b93d404172199b238ecd54d0ab6f8df9e8490fc61bda7a06e8c90932c974aca52ff6065ab08ea02d0cd114e7d9e28fa11df05142d9731a61b88553f53ba0e0f622ea619c47cefef9f0d656bb01e222098b280470eb879df3510adf8138921407bdb754d96b62cd34601ff7fa094fa565b093cd28632ed774e", 0x99}, {&(0x7f0000000500)="d4a003fc32e0de5b0d461b3a640899d7bd6bce0747cfbb0555517e0fff9d780923dd9586fb1da40950ae2b48e699fa975713244d5c1060ac6b6e05ad838327eeb702c2d5a0e0a494943c0d82ee3f1dba2de240d5f051cdc5d13f3fbc49b143bebbaf69f4cda0e709379875415f81a386", 0x70}], 0x4, 0xac, 0x9)
creat(&(0x7f0000000240)='./file1\x00', 0x28)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
socket$nl_xfrm(0x10, 0x3, 0x6)

14:02:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x8)

[ 3083.987714] loop6: detected capacity change from 0 to 40
14:02:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x3)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

14:02:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38)

14:02:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq={'euid', 0x3d, r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

[ 3084.000377] loop3: detected capacity change from 0 to 40
[ 3084.016780] loop2: detected capacity change from 0 to 40
[ 3084.040438] loop4: detected capacity change from 0 to 40
[ 3084.068521] syz-executor.3: attempt to access beyond end of device
[ 3084.068521] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3084.069522] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3084.074748] syz-executor.2: attempt to access beyond end of device
[ 3084.074748] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3084.075844] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:02:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0xf)

14:02:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x64)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x7, 0x9, &(0x7f0000001880)=[{&(0x7f00000002c0)="531958a4736e72189759133d0eff668b122d59e37b35ef986647eb492568851799b96fbd7ed49c6a031b4301d5df7fa4d38b31b0abb1c1f28153f9b265f89164b5138716adf0aecdaf855240d2b7a554dbaeea3b7fb60498b1e9ad7bdb0ab8cd6956b10073f274f5c576742ff995", 0x6e, 0xfffffffffffffc00}, {&(0x7f0000000340)="9603535016bf3b81fef72ae892c6f608813560508ce46600e485fdb052336db0cb0dce68f767b39003e68c8e9adc0f2d4fc873b2c1e497ff3da5abf9d5318170228ab51b9172030e49784eb196deaeede37eb31bfaa17b08efab7f9a035360f2be73de5e6dee94a67dbb41e2aa3484459dc774c1c7346f7665c9a78d8b41349123568d94ae03fc036207511dbe3b428508abb86bb6cb180fc00e8254b82891ff8233cae459fd59d50fd96c1fc604", 0xae, 0x7}, {&(0x7f0000000400)="f050c5b16d630f07b5e93d59e2066d17cb9dc01fb9a3b3e27eab5db4be69e246845f5aa1de8b1191acb97db9ee76ee2d1bb06f2d2417977cab70ba8f2e3640a827992fc3cafc2cfdeea2e5fab6aa49b4c29595f28e4189329ae4599cb61fec9548f907a4c22a", 0x66}, {&(0x7f0000000500)="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", 0x1000, 0x100}, {&(0x7f0000001500)="307698f9f5d3d895dd431d82587c9ab32ade7da4c45995ff32e0f06aa051fde55d68f436d308eeb7abc4493f6386ad9d0ee83d955594d4072b1f2e86ddf31b244dd894", 0x43, 0x2e5}, {&(0x7f0000001580)="b540c476b14e69a8267d3fb52b4b0d35939ce3efe1487fdcf0cc6897189eaacfa1d7abbbecd0a4797979f692122347951db5462afeccd6aba5ecece18d7efb469c8c8045f59fa5e579a6415e58e002f8ef383f6d9c9604172e998907e49875cc6b9b18054b1df24cad3195f508938bc98326c14d94cb6fb29542c01b429fd0fe7b73c49213cd938c66ab5da6aa8e7e135ceae80d6fffa0ae6d2e63d660e46752e390c4ae610f26ad46c8d1f43388330070df3df58d00825e36be712c2d60e88cc2f9cd30437256d7cfd4c3d4527093f203b1fffcee74031d7ae49997e6429f9eafde1348658f02", 0xe7, 0x38}, {&(0x7f0000001680)="d0678358d3391ffb2482eba9eac9861f3994fe2ff70ed64cfff80c28e90ae938bf05b46d3448c7a644dfb8a3597016cbc73a0e3c24ceee741fd3df714055ad6673c5239d853077dc819f56ae86c9b3704670ce1b4afbbdaaf91be54386c5f86e6c6a5e76dc833a0bae5945be623dbc99170d629321d879561df81aceee78b8143b2b90745c9e6bc390e8f32cae59206f422d44e7ed", 0x95, 0x7}, {&(0x7f0000001740)="8f662dc1b955ff7d46aad488dd54e49c7d83bc1ee936b5df37c7f4f438e088d5eb4d9abf3b4e59f89b48778545f240640dd785e2ee3a18cc277a27742d422803cb341ec1d926276a31e15f442693513060feec15e131b12f42fd411069cc8c65760c55049fea91e267ea80f5274b749090f8136e5eaa03abb6e6b71ffe011d99c6463159847cc474c8f104aa2595d550466b6266d27230", 0x97, 0x3}, {&(0x7f0000001800)="119894c41067c9ad9877315ba2f663d67fa4bb80b8341411d40bdb1a850bb189cb76dd0ca6a68c6bbea7af9e267f34ecd8f961f7adadaf30e110c4452c6088ed0e70096f", 0x44}], 0x200000, &(0x7f0000001980)={[{@journal_checksum}, {@data_err_abort}, {@norecovery}, {@mblk_io_submit}, {@debug_want_extra_isize}, {@data_journal}], [{@appraise_type}, {@smackfsfloor}, {@obj_role={'obj_role', 0x3d, '{/.*,'}}]})
r4 = openat(r3, &(0x7f0000000480)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f00000000c0))
sendfile(r1, r0, 0x0, 0xfffffdef)
r5 = dup(r2)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000000))

14:02:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39)

14:02:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq={'euid', 0x3d, r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

[ 3084.195538] loop5: detected capacity change from 0 to 40
[ 3084.197710] loop6: detected capacity change from 0 to 40
14:02:40 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001100010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:02:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x1c7ec0, 0x0)
pwritev(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)="a72f6ce621ccccff4de7e89c41a268c870aa3c0880ef4ccb4b8cd4aafa5c909d65beb4bac350ff6187efda89a56d40a7d8169a85611a1438a63dedea15b4d061613842de287d43a04fe30858e7098ad4fb58af2ad40160ce45f1d8efe05a8fec3b30b048916ea3049e3a4efca31590646df93fe28dadc04a88f05e10910644d902f3699fefc356e45b4b1dd2f06fc64279e83a10c2deeee3c4fab106a30406df26c1e02d5ea76084ffd1965b757db717f1a29478426ffa509a8d0ca9749b98790ee66a32332904a1e858c016abea", 0xce}, {&(0x7f00000003c0)="dea8ca97e7be519840e1b1", 0xb}, {&(0x7f0000000400)="f2763363cdbc0c5e196a88b57cafcd599af67cdac3b451c74089a9375161d9083b93d404172199b238ecd54d0ab6f8df9e8490fc61bda7a06e8c90932c974aca52ff6065ab08ea02d0cd114e7d9e28fa11df05142d9731a61b88553f53ba0e0f622ea619c47cefef9f0d656bb01e222098b280470eb879df3510adf8138921407bdb754d96b62cd34601ff7fa094fa565b093cd28632ed774e", 0x99}, {&(0x7f0000000500)="d4a003fc32e0de5b0d461b3a640899d7bd6bce0747cfbb0555517e0fff9d780923dd9586fb1da40950ae2b48e699fa975713244d5c1060ac6b6e05ad838327eeb702c2d5a0e0a494943c0d82ee3f1dba2de240d5f051cdc5d13f3fbc49b143bebbaf69f4cda0e709379875415f81a386", 0x70}], 0x4, 0xac, 0x9)
creat(&(0x7f0000000240)='./file1\x00', 0x28)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)

[ 3084.305019] loop3: detected capacity change from 0 to 40
[ 3084.333930] loop2: detected capacity change from 0 to 40
14:02:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x13)

[ 3084.385759] syz-executor.6: attempt to access beyond end of device
[ 3084.385759] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3084.387711] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3084.391941] loop4: detected capacity change from 0 to 40
[ 3084.433502] syz-executor.2: attempt to access beyond end of device
[ 3084.433502] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3084.434608] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3084.444976] syz-executor.3: attempt to access beyond end of device
[ 3084.444976] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3084.445918] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3084.508493] syz-executor.6: attempt to access beyond end of device
[ 3084.508493] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3084.509447] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3084.555005] loop5: detected capacity change from 0 to 40
14:02:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 40)

14:02:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x64)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x7, 0x9, &(0x7f0000001880)=[{&(0x7f00000002c0)="531958a4736e72189759133d0eff668b122d59e37b35ef986647eb492568851799b96fbd7ed49c6a031b4301d5df7fa4d38b31b0abb1c1f28153f9b265f89164b5138716adf0aecdaf855240d2b7a554dbaeea3b7fb60498b1e9ad7bdb0ab8cd6956b10073f274f5c576742ff995", 0x6e, 0xfffffffffffffc00}, {&(0x7f0000000340)="9603535016bf3b81fef72ae892c6f608813560508ce46600e485fdb052336db0cb0dce68f767b39003e68c8e9adc0f2d4fc873b2c1e497ff3da5abf9d5318170228ab51b9172030e49784eb196deaeede37eb31bfaa17b08efab7f9a035360f2be73de5e6dee94a67dbb41e2aa3484459dc774c1c7346f7665c9a78d8b41349123568d94ae03fc036207511dbe3b428508abb86bb6cb180fc00e8254b82891ff8233cae459fd59d50fd96c1fc604", 0xae, 0x7}, {&(0x7f0000000400)="f050c5b16d630f07b5e93d59e2066d17cb9dc01fb9a3b3e27eab5db4be69e246845f5aa1de8b1191acb97db9ee76ee2d1bb06f2d2417977cab70ba8f2e3640a827992fc3cafc2cfdeea2e5fab6aa49b4c29595f28e4189329ae4599cb61fec9548f907a4c22a", 0x66}, {&(0x7f0000000500)="a3bd942e4164430db6724ba8f512977b3d3c9f5dc992e17d6fa442c5212ab03834c8ab2a54e1d7043410f8fa71a51ca3e6b9d99053788bc8214d330ab721ee061af49a705e95b194b57d6d98095f38e80f303425ebba5e08825e2757ca7d02f8cfc7c50ffcaa4b9ae6f14cb6ffb264a2db21766250e342b982d33555562ec33fb94b673ca4935a99212d3641a6e099973faff5733718a8d5c93b99144b2fd37faf817f7e3c110a70994fc93de5a554113f428b1cee63d147f382cdac53e243f6b874d2c8f3b274f982ff8004c451d7cd2c84ed94a6c39d870892cd6b43d7017b785ca92d3f32e932877b019a59a5013db87f2833666820233eed3bf48c66ad966885e527acaf1b2bd8d7f2fd30a6b89523757439831c122e4935295040a7fc45f61947572b33e9927de396b7bae6a124682d5d98133cf0ae48154eaaa807a96ff3fd7914125170b5b0b314291238574f57a6d90171431baf4408b0da49d46c07500698e7b6efa0eb971c3b3785194575ab91ab5c0e394ff694bc23cd27223d1abd6c937a70995c906a19b2e34239ac765bb3ede345943ed93424819633655378f6ac9e891ab5d4e9b874701d5ae8f6474176b6eff4a2dab1fd2491fece09fce1a5ee458820506a2265b2bd10315b8efc626e3febd8b4c0f64e3a2711044784a2b28582476ab59c09a6ce97a69eb93f8ceedf4df9f3f0a04d418e31ebd7b38707abcf4bc5f48621c4d6216be65241241678af0944814d8da63d6a84ac7bea952e83519025a9b0412ac5c6e0990ad0d633859f40e087eefde5bf7bd2399db59d4c6d1cf0f22d05ca31387aaf320344bec95c8946731cb6139ab800170b5c561bfa0cecd51a65b551d12290b1a6ede150aa44ef646179976d1090dae25c6135527a3e56bcff3ee63d84068db7947343c524d397fde6f2fb627dde9e236905313fc66bf6244c78f728f457a1bd8af56c4d63a92ad28a4378bd5648dfcc3a9b5ce1c60e0685b2993f3cc1a34adb90b133acd7031c50966c620aecf69a07133ef59b4747c9aae47f324de224847ccef29edfc451a7f9b95f128b65453fe3e2d67139ef0d6e5d890afe60399d0bcb17912bc4c74937ec3929c5cd1546a4cdbfc99538dc8b4b77fdf7f64710a6bd6e48fd52b7c2b371e537e8463749bc933224710c4b4f902fcd7f1371218461c0162cde9ef255cc9650565b4e29091e736f3c99b0db264e42b0f22237e2ec72abfe47b215eb3e708125583778e39a074be0f14eea2647c48b478f95622aebf326919d420359bba79ceecf3b2e9586995437609c1cb3b9214dac103862b11231f2c735a25c80976d44f7958f93a76cfd077c075f62739d6a42118979e464547383165154e1d28c58b96394ebe836d17ec61802b2ee4d69449796c030c9f37506a87d494dea6bf6fb34acf078be0c8106a61ab0334616d570f030136e33fc43dab55d3dcaccb97a65c35d512be5b05e5d2e099a218d0d69b58fbf0c8a93e832c704b4ff1a58919a4bca3650b1b7ec954bcecf739082f5694736b84fec8450dd18533ad1ddb198392ede29c170b3be631392abeddf65a69e25175c44dc7c13002a8a59c17ebec753d558873240b0de1f56f657793248446f8f00a6cf0878a3a960e7e5ebc2251eace6046ccf7e9248e967c65f2e52df4fc6d8978f1cd50560cd0049873ba55ae5104267c0c9c64cfd691349fe248bbd578c83425f5d4ae064c9fcaeae69e8b00cb88dcea38a20e7f4f42e55df7886a75b11e214b8a27b296c3c5e355a8b4578132101427e89bc9247d1132912827a8db0d6ec1f8125e7a0b36322c4310f1c81a9c0ff437a738c2c8a4522a6f0f99aab93c781eb75f69168a753a838bfbacdcd64118606262c6f9580deccce18f2f4b6a0d964f5aeb582fe991119c79cc1116f46471141ef186278ea951dfb35104317a0a6a78b6834bfd0ec5b6edfaa3c19a32defd511518509aa9159a4f7492357b69b529e4d557e2887c084ddc53f55cce90af7e175388e1540c25f3c930c56f80d74aedbb48480409f16a9aa7df23ecd45351b5c28eeea6afe0e7f40708620ec80803452f35ae300a9386f141191b13977fbc70da99a96d62d7b6c14dda0fc540ef7d043d55e38ed4bd2e81bbff3227bdf6202add1e4f3d110af06919695f6a8f831346ead52b6ec6da579c3db5fb4defb241e1be3b410b98f0db06b9ecb9072901f130211ccf357f080fdc839f845da6d37eb81e47f61dfc73a2519c03b72a91b36a9a81cc757f5620b86874a1865dc5fac9b0d11e627748e80a0b73477d0072845b73741545e4c5fbbc44b7b3900dcfc91056905dd94196f2f4a8a7879cbca270de27f951edc18f1dd595e58f6647be951e61dd49d0736151d0b52ac38cfd8c253522e9ac42412661ddab37664ea079147a38d0475f433ff022a3c556bd2a473e45a33b86ccb667dfe380a9a3204dfb4d3568cda269a93dfc98f666c8ac3f97de68bc8b478a20f79d7db53fac9622272baded5b0a4dccb35343aae7bee4602cba63a9a3ceeb9f931ddb05019d23b518d09749c2f761902e9d7b8c2c2ffeb713687a7607a41fff11e580a5f1908b3407f48ade1a69ceddb4ce5af53a8b17eec357e1aff3a87fb8b4c04985b744c80eabc3c38eb26a583ea3c341eb09acc93f28d3698ba8e36cec827f1a365e8449452b0e845fab1b5e18ad6a4de6b3b74d4ac70c413f0dffb6ffdc1c3d883493347982f3893e9a6c18e7199d0a928774aea1a1bc2b5dbcb8a1f06d02637d3ef6e493f1e0964931eb2269cfcfb3bd6e987a701a737ee2ef53834c5205b7109e6928476d162ba6b843d7575f8d7a23053be89bb7a0672a3e2584f225464a754a5c257ad0475c80000428ee2d2d9136f6050c170962096925a30e57be2dfdeb7a1b9bb8c37e70362882658b808b11e21d73abfbbd2c25b68f71277c33b59ebca537338626dfd9550fa10172d6c8a6de8ff165cc2384f8c823fdf8938ad34006f46cb2d5e4e382bece42e580b3b53962ff16bf4791bf1abe53edd91f18fb5f7f90f4eab8e17ab517c6f9fef5dd6d75c413079b62471c4ea56c7a40dd10bd36d1763814f41e45b46f87041db3637e6dd98bebbdc62cfd8e0b0b0fdb7f07c2058f340dd274ac7b7d0c7c2f3ffae8670de6b4ac0757184d540a6e87cfe8558c146b70fe963a493ada1f40c8952a4f46be5ea82b25dab83b4e24f8a605667535136fb27b839720c60234641e98e643f5fb7538d759a190156a462c52555f400ac8c8ad34b5852b739ad9b074e64e47e0c1c3422745d2e70921bbccf548dd6b740bbb853dc19738e284e368e92a6568ccabf5855166cb649f9c649c89d1f900447de67b26238ce7c16253c271caabf6de8e37b5e8ccdf80489d268da9d2789e8eca4b0022cbc8282908eda5c57e07bc84877b9f8fac0e116be0bcbbd6e900db5e037764ae4b9356d1ea691f3b58059b6bb2715c8e16d84c0fe5b807f6bcd273bd04251e43fa6989e07c3075634e7f3249bd0f2c0d3cfb58160725efd90bb26a029d6c6afdf12265acad0f15cc907d42a362c822be395d468a79d80f07b861367ccee2f1dca4a8ce3179d881118d2ef38fd79ad4612d35535c23cefd160ef5f8b7733a6c2d7b5b82266eac214ebc152f03c8376117b4dff8aa668a3d33c148440f01503c7a7ea2e912afd9ff945ca86ae5a710f76dd97947a00cc318eddb4faba331e651aacc3712c11f9c68c5680f16a18b73eb874d2ceef13a97f6d0d978c9f4b9f8534191805e007ec5b8e33562f3b060d7beac1e78e44def885edd31a1bd4b412cb2d315d2edfab0e06dcd49bfc9723c9368ca6a6f285f9a1e6707ced2d8eb72a6de1f540bcbdebeb3faed776087bd2ff33bdd9b9c28a4aed01e4e82577a91c95df416b62e661d2dce1feeded91fefc6b063f650383ea45209896699b12a8974d90037b257a2fae9f0dc2cbb2bdfa4565adebf92c1a64c4c84d86c8094f0f90f1ba8a6e5c9a0d0589fee2d00f76cf69e27e6737483a8e620cd33e13711a1336f39360751fe1ac2b9a742d26e008ef25da98b524526ee27479880050ac1dd7e45598c7b050a4f49e470d1b1d42f45a7187acdbb4c6c5c8d074beebe14b809ef6a28a8a10c78a089daeb0ced1f21698bb7fc1f992488997fbc3bbb01c0a0d70f6bf6157043576b793158617942aa7e6940d67e19ae8a627a5f5d7a3fb65a044768a7b99c4742308aa35c9021a3c5a15723288faaeee45468f54c6ddd5615ff41f820260795b3b5218244959c564eec021d68eda014d78a56d9e9a508efba2723573b5ebf99b70a291d6134d16c352cecfad167271ffe5798b2f1e798ff3ee8d3d974aec9192cb2228cb1f816ebb2eeae082b18e5a23ddfa7f64878e9ef7afa0a52f925d795ea3045f53689c46e89c5040b91f77f64988884aac8aefb33a48d5de55f76200b0368680fd8ba0d340e41a51929cab9a068567308e196e0b7dcd6b8d184983906de82bb29388aaad333bbd226db406d70f5130704082ece2553206aebe4769e4c0dab3959bbd007aa2b968e205363eef98b07783c4a464cc8ee4da04f92714a50b15b8216b812d23edcfb8fbb442ef6c936437b12aa2d69aa7dba6b5f867a213b4cf4c32ebe2fa34059c66029a6dc34807a01a4a9e121c74e038a2d3ec03bf37302c24b3737a6fec8b93c53b6cff5c92eb206a437747903b445109f83d8e0cb22dbcd164cbddf5f0986fc08d715424a5531c150f2ab007a7e5654b80c0c31df04185b0d76162747b2ff5ac0bac6ff861fd49e825f8ead1375990339ed0bd9a9c70793727586e56a271358d3b8b40f18f1a15fa4ece8353aa2250750b0c1c0a0735138af12f71ea7d814c374e0b7f81cccafb4b3785d29c1cc74772b0b5cd2a26b8bc7ccae56da9cdeb4558e046736bbb52a34e2d1d9c0ead977a9dbd7bcde68e948d4fbf91dfc1a7c1e85662b1d4dcda6ad3e62ce0576379a48cc65b863f52b6f69c01e562f874c8b040962677f1f9ea9c4ccb10ed9bff054275922663f272f9bebe332fd1b6a6471bc6ccaf3bce9ea8de58d11a8b1776d48ccf0950b605c4d1b6f4cba00c7962cd965ac33c81383dfaf7744c252ba9b257508d8e438fd1cd7fe1a6353a5884756b95a686210e9ac56a69e6f24e71b2f1701ea12a1fc1986893d29fdabf394500958a2760e0b4422e9a82e9056645d1fe4a90ff72258677d2835b3c3ec66d50f10fd80d30f7bd9a772ee53093ee78bd0fe22c22f267e168f9e06fcf5b9fa0221884b817882bd02cc374ae40062855d521e316c123add8a9741cf1d8234bb8be6f4e92b2cc305a2667ed13fcbeddd900eb3e742c766fab346449c3958679b58b0497b462af330f8d166208260d41674fdbcafab7ee556de0d5bac450e166ceee16a1beaa58985ca1e20baa3642f8d33682342cf6cbc6d75073a9bd97793d9cb93b64a444cabe92a6725835eda5f542e31309a93d0fbba3244cf1c944a6380826ddb8f3b68f29b15319d520fcf0d34d75f856a4387a7225ced2f5978e9a65c9e09e7c03e4dc961f1e2a54b43ce35206ca8144e6931f9e6ec0f55c57534ed0433bc296b9518de379aa1d26a0714c687675f7d774248df1bada8bb8b39607f450ed393ed7d82e9fd6d9caf62957f45389725a7115ecb658e96ac833ede6675f97ab779319a4fcafeec9398e31ec27f2ce0c69919f07bdd84d642e9d009deded4ec47d6c8bac7b81ef2d002f450fcd0c4b52a7ccdf261364013ab3ce1f84f1f3af101cc60f529835c9d99b275e137eff02", 0x1000, 0x100}, {&(0x7f0000001500)="307698f9f5d3d895dd431d82587c9ab32ade7da4c45995ff32e0f06aa051fde55d68f436d308eeb7abc4493f6386ad9d0ee83d955594d4072b1f2e86ddf31b244dd894", 0x43, 0x2e5}, {&(0x7f0000001580)="b540c476b14e69a8267d3fb52b4b0d35939ce3efe1487fdcf0cc6897189eaacfa1d7abbbecd0a4797979f692122347951db5462afeccd6aba5ecece18d7efb469c8c8045f59fa5e579a6415e58e002f8ef383f6d9c9604172e998907e49875cc6b9b18054b1df24cad3195f508938bc98326c14d94cb6fb29542c01b429fd0fe7b73c49213cd938c66ab5da6aa8e7e135ceae80d6fffa0ae6d2e63d660e46752e390c4ae610f26ad46c8d1f43388330070df3df58d00825e36be712c2d60e88cc2f9cd30437256d7cfd4c3d4527093f203b1fffcee74031d7ae49997e6429f9eafde1348658f02", 0xe7, 0x38}, {&(0x7f0000001680)="d0678358d3391ffb2482eba9eac9861f3994fe2ff70ed64cfff80c28e90ae938bf05b46d3448c7a644dfb8a3597016cbc73a0e3c24ceee741fd3df714055ad6673c5239d853077dc819f56ae86c9b3704670ce1b4afbbdaaf91be54386c5f86e6c6a5e76dc833a0bae5945be623dbc99170d629321d879561df81aceee78b8143b2b90745c9e6bc390e8f32cae59206f422d44e7ed", 0x95, 0x7}, {&(0x7f0000001740)="8f662dc1b955ff7d46aad488dd54e49c7d83bc1ee936b5df37c7f4f438e088d5eb4d9abf3b4e59f89b48778545f240640dd785e2ee3a18cc277a27742d422803cb341ec1d926276a31e15f442693513060feec15e131b12f42fd411069cc8c65760c55049fea91e267ea80f5274b749090f8136e5eaa03abb6e6b71ffe011d99c6463159847cc474c8f104aa2595d550466b6266d27230", 0x97, 0x3}, {&(0x7f0000001800)="119894c41067c9ad9877315ba2f663d67fa4bb80b8341411d40bdb1a850bb189cb76dd0ca6a68c6bbea7af9e267f34ecd8f961f7adadaf30e110c4452c6088ed0e70096f", 0x44}], 0x200000, &(0x7f0000001980)={[{@journal_checksum}, {@data_err_abort}, {@norecovery}, {@mblk_io_submit}, {@debug_want_extra_isize}, {@data_journal}], [{@appraise_type}, {@smackfsfloor}, {@obj_role={'obj_role', 0x3d, '{/.*,'}}]})
r4 = openat(r3, &(0x7f0000000480)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f00000000c0))
sendfile(r1, r0, 0x0, 0xfffffdef)
r5 = dup(r2)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000000))

14:02:56 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendfile(r0, r0, 0x0, 0x9)

14:02:56 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140006001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:02:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
[ 3100.440598] loop5: detected capacity change from 0 to 40
[ 3100.443725] loop3: detected capacity change from 0 to 40
[ 3100.447023] loop2: detected capacity change from 0 to 40
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x8, 0xffffffff}, {0x3ff, 0x7ff}]}, 0x18, 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000095b5352a4158e94b6ed5e6aa39b3399359eb93b3724b6dae87a00000000000000000000000000200000000000007f8c0001000000020000000000008439fcbfdf114900ca3e202fe3acaf3ecda2ed4add5f38946498f3f28d98c7bdf940a718c3f9834e9b9f91ab3845eede702d4afaaed3f35251"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
openat(r4, &(0x7f0000000240)='./file1\x00', 0x60000, 0xae38660a0df4bd46)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:02:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq={'euid', 0x3d, r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:02:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x18)

14:02:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x1c7ec0, 0x0)
pwritev(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)="a72f6ce621ccccff4de7e89c41a268c870aa3c0880ef4ccb4b8cd4aafa5c909d65beb4bac350ff6187efda89a56d40a7d8169a85611a1438a63dedea15b4d061613842de287d43a04fe30858e7098ad4fb58af2ad40160ce45f1d8efe05a8fec3b30b048916ea3049e3a4efca31590646df93fe28dadc04a88f05e10910644d902f3699fefc356e45b4b1dd2f06fc64279e83a10c2deeee3c4fab106a30406df26c1e02d5ea76084ffd1965b757db717f1a29478426ffa509a8d0ca9749b98790ee66a32332904a1e858c016abea", 0xce}, {&(0x7f00000003c0)="dea8ca97e7be519840e1b1", 0xb}, {&(0x7f0000000400)="f2763363cdbc0c5e196a88b57cafcd599af67cdac3b451c74089a9375161d9083b93d404172199b238ecd54d0ab6f8df9e8490fc61bda7a06e8c90932c974aca52ff6065ab08ea02d0cd114e7d9e28fa11df05142d9731a61b88553f53ba0e0f622ea619c47cefef9f0d656bb01e222098b280470eb879df3510adf8138921407bdb754d96b62cd34601ff7fa094fa565b093cd28632ed774e", 0x99}, {&(0x7f0000000500)="d4a003fc32e0de5b0d461b3a640899d7bd6bce0747cfbb0555517e0fff9d780923dd9586fb1da40950ae2b48e699fa975713244d5c1060ac6b6e05ad838327eeb702c2d5a0e0a494943c0d82ee3f1dba2de240d5f051cdc5d13f3fbc49b143bebbaf69f4cda0e709379875415f81a386", 0x70}], 0x4, 0xac, 0x9)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3100.462465] loop6: detected capacity change from 0 to 40
[ 3100.466231] loop4: detected capacity change from 0 to 40
[ 3100.571935] FAULT_INJECTION: forcing a failure.
[ 3100.571935] name failslab, interval 1, probability 0, space 0, times 0
[ 3100.573666] CPU: 1 PID: 14127 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221207 #1
[ 3100.574644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3100.575611] Call Trace:
[ 3100.575935]  <TASK>
[ 3100.576223]  dump_stack_lvl+0x8f/0xb7
[ 3100.576708]  should_fail_ex.cold+0x5/0xa
[ 3100.577236]  should_failslab+0x9/0x20
[ 3100.577724]  __kmem_cache_alloc_node+0x5b/0x400
[ 3100.578299]  ? iter_file_splice_write+0x169/0xcb0
[ 3100.578905]  ? iter_file_splice_write+0x169/0xcb0
[ 3100.579498]  __kmalloc+0x46/0xc0
[ 3100.579949]  iter_file_splice_write+0x169/0xcb0
[ 3100.580529]  ? generic_file_read_iter+0x330/0x550
[ 3100.581146]  ? generic_file_splice_read+0x1bc/0x4d0
[ 3100.581760]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3100.582396]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 3100.583043]  ? inode_security+0x105/0x140
[ 3100.583681]  ? security_file_permission+0xb5/0xe0
[ 3100.584287]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3100.584958]  direct_splice_actor+0x113/0x180
[ 3100.585511]  splice_direct_to_actor+0x33a/0x8c0
[ 3100.586166]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3100.586854]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3100.587484]  ? security_file_permission+0xb5/0xe0
[ 3100.588134]  do_splice_direct+0x1bc/0x290
[ 3100.588731]  ? __pfx_do_splice_direct+0x10/0x10
[ 3100.589407]  ? lock_is_held_type+0xdb/0x130
[ 3100.589999]  do_sendfile+0xb1d/0x1280
[ 3100.590577]  ? __pfx_do_sendfile+0x10/0x10
[ 3100.591196]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 3100.591928]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 3100.592711]  __x64_sys_sendfile64+0x248/0x2a0
[ 3100.593355]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3100.594058]  ? rcu_read_lock_sched_held+0x42/0x80
[ 3100.594667]  do_syscall_64+0x3f/0x90
[ 3100.595172]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3100.595903] RIP: 0033:0x7f61b5a02b19
[ 3100.596423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3100.598857] RSP: 002b:00007f61b2f78188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3100.599903] RAX: ffffffffffffffda RBX: 00007f61b5b15f60 RCX: 00007f61b5a02b19
[ 3100.600870] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 3100.601841] RBP: 00007f61b2f781d0 R08: 0000000000000000 R09: 0000000000000000
[ 3100.602802] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 3100.603799] R13: 00007ffdbc84f80f R14: 00007f61b2f78300 R15: 0000000000022000
[ 3100.604797]  </TASK>
14:02:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0xf0)

14:02:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000100)='./file0\x00', 0x1c7ec0, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3100.702334] syz-executor.6: attempt to access beyond end of device
[ 3100.702334] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3100.704649] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3100.709758] syz-executor.3: attempt to access beyond end of device
[ 3100.709758] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3100.711671] Buffer I/O error on dev loop3, logical block 10, lost async page write
14:02:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x13f)

14:02:56 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000007a0000000000000000000000000000000000000031a926c391007f2d000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:02:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

[ 3100.887178] loop4: detected capacity change from 0 to 40
[ 3100.998600] loop3: detected capacity change from 0 to 40
14:02:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x239)

14:02:57 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105042, 0x0)
openat(r0, &(0x7f0000000180)='./file1\x00', 0x50820, 0x68)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x40)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190000000000000005000000000000e24e4167329ede4ab145401e190000000000000000000000007f8c0000005386911778028f35ce9b9a3ce3f70ec9f74883768edb21b97c4e5ee39b45b9ab52227bff3ef719eeea6e55277e3ec6862580b3e08c82635ffe23fc99b580c1152a1ee640f0e1bc2a415fe7adb57f23a65837569889551a9e786ae511b27ded11d9533f19e598f5f07c230ba4b659a8e168db74f4ea63f9aeefa65f8cbdea151b116bf0defa39385e82dc6953b0b5978aa63b54352aae454b43467177b25fa7bb6373c1db2c84b96321"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000190001000000007a00000000000000000000000000000000000020007f8c000100000000000000000000090000000000007a50ac6c0000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a", @ANYRESDEC=r5, @ANYRES16=r0], 0xb8}}, 0x0)
getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000500)=""/199, &(0x7f00000000c0)=0xc7)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file1', [{}, {0x20, 'vfat\x00'}, {}, {0x20, '&{'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, '-'}, {0x20, 'vfat\x00'}, {0x20, '}$^^@).'}, {}], 0xa, "f02fe7eb70c478d03c8effab0408c3fcb96a2a0d418aa7261c88ecf3ccacfec52d43a742075f634cbccfb13bb91efa66d57bfa810fe28e6d20c1532078bf6c2b1150b9b4b2137cf652e5604d9f05392263bd7db698ed49ca6f9620ddeb2e96bb7856be9d72d81ca8a7eb8d84230faf8b4d8c4eaa1d648d2c9d7d258b303357801c7da21c1f4ece25a64984fa8e71a264718e14ea9415e471eddbe642266fe2d69839cca61bc2cf5c8e0c37fc21b5556c3cfc11ec56aa0b6f91a3484e9dd0048e1b8febd71dbf1c3510dca1a546798189bed881fd852f608aa7e4250bc03c6dced7639b46119e8a48be74a7a9"}, 0x11f)
syncfs(r6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000006c0)=@getsadinfo={0x418, 0x23, 0x1, 0x70bd2c, 0x25dfdbfd, 0x0, [@replay_esn_val={0x20, 0x17, {0x1, 0x3, 0x70bd2a, 0x70bd2c, 0x70bd2b, 0x4, [0x7c7]}}, @algo_auth_trunc={0x145, 0x14, {{'ghash-generic\x00'}, 0x7c8, 0x180, "ea53c6a54d61b9b3697e4acd67fb0431270177fb13d14cab638f857983a36987989e7d4645a2e1cf3179847cc8c9e16ccf889c627b5f40240627fc26ee4e13731b339a0eb87799ba210cdbbf8bc6abd5abe2101328ac8d48349051a6a03d2f5c3d672890e6ad39c4c756d54954b06b880ff0284d1671a0e8b1b101c501ac3d33d01cdd9273037ee07b943b06b8a8a5869694a5b9d6df17ce9bad645bbc5832807b049ea8daa687c2c77ec7e111d7260b02485bc9ceb52d9026339e69e12b56e5fd5191aec814576503f14dc8a3c30beb75d59673e85d889ce64a4806a50608128bf8bbd7e3f08c42c5719170a121368f5dbd71d7d731e41bcf"}}, @algo_auth={0xf6, 0x1, {{'michael_mic\x00'}, 0x570, "6a22668f0ec4fc0b7f8589973eb9e0c1933baa538c2202aba1ec4c29773d58b66e7595065234c45d409947def0b6a8686c225fb6088af83cd1dff7b2c380ac1054760a13e55f42aad094dda188298726748ec8931e53919df74df52cbe1607ccfc97a0008953f64641c5464138c2f50eaa9f67af6e4b927b7b1499792f90e72a5ea33d97e534db3f9aa6a49ff4ad6cbb8d03904f0d18f8f6183564ed71a19af1988ebcd0a8157be2e800bdf6b025"}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd27, 0xfffffff7}}, @algo_auth={0x67, 0x1, {{'sha256-avx2\x00'}, 0xf8, "2a3e629d9fcbeaebc0c80b53786c71e7a8c5e45cc82a3e74009d838f698354"}}, @algo_crypt={0x12a, 0x2, {{'ecb(arc4)-generic\x00'}, 0x710, "56875f2742a9f23bdfd879d95db3adc9e731acd27d2ce0eb27bb112e878dc2c6db2d3fe1e396e401232dea316ff24351c6886dc96ade7b9af66115e92166aeda6204de2baaddafe16b3ddd5d5a954ba6f5d9ed380f3fe4dfb03c448e1c4c5f88a744363161a6d3ba8bd123717a3a3416f5d806fa1c411a5d28c2482ecd7392b4d1d6fe5ad6c73fcae5a14a8ead28e6ad52501ac4f5ff91614310fcb7b2fa06b8f72659e26796cc93ee072087ef271249c7a6d21a03f4f5f0b41c7645d4a8a1e57c365eb07239a75e33df81bbb5744b91bba2c78c05fedf5a6509267def8a546dd378"}}]}, 0x418}, 0x1, 0x0, 0x0, 0x801}, 0x80000)
sendfile(r2, r1, 0x0, 0xfffffdef)

14:02:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 41)

14:02:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3101.091512] loop6: detected capacity change from 0 to 40
[ 3101.110701] syz-executor.3: attempt to access beyond end of device
[ 3101.110701] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3101.112358] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3101.138995] loop5: detected capacity change from 0 to 40
[ 3101.153980] loop2: detected capacity change from 0 to 40
[ 3101.187696] loop4: detected capacity change from 0 to 40
[ 3101.284200] syz-executor.2: attempt to access beyond end of device
[ 3101.284200] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3101.286129] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:03:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x81542, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x8, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r2, r0, 0x0, 0xfffffdef)

14:03:14 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000a001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:03:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

14:03:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 42)

14:03:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x64)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x7, 0x9, &(0x7f0000001880)=[{&(0x7f00000002c0)="531958a4736e72189759133d0eff668b122d59e37b35ef986647eb492568851799b96fbd7ed49c6a031b4301d5df7fa4d38b31b0abb1c1f28153f9b265f89164b5138716adf0aecdaf855240d2b7a554dbaeea3b7fb60498b1e9ad7bdb0ab8cd6956b10073f274f5c576742ff995", 0x6e, 0xfffffffffffffc00}, {&(0x7f0000000340)="9603535016bf3b81fef72ae892c6f608813560508ce46600e485fdb052336db0cb0dce68f767b39003e68c8e9adc0f2d4fc873b2c1e497ff3da5abf9d5318170228ab51b9172030e49784eb196deaeede37eb31bfaa17b08efab7f9a035360f2be73de5e6dee94a67dbb41e2aa3484459dc774c1c7346f7665c9a78d8b41349123568d94ae03fc036207511dbe3b428508abb86bb6cb180fc00e8254b82891ff8233cae459fd59d50fd96c1fc604", 0xae, 0x7}, {&(0x7f0000000400)="f050c5b16d630f07b5e93d59e2066d17cb9dc01fb9a3b3e27eab5db4be69e246845f5aa1de8b1191acb97db9ee76ee2d1bb06f2d2417977cab70ba8f2e3640a827992fc3cafc2cfdeea2e5fab6aa49b4c29595f28e4189329ae4599cb61fec9548f907a4c22a", 0x66}, {&(0x7f0000000500)="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", 0x1000, 0x100}, {&(0x7f0000001500)="307698f9f5d3d895dd431d82587c9ab32ade7da4c45995ff32e0f06aa051fde55d68f436d308eeb7abc4493f6386ad9d0ee83d955594d4072b1f2e86ddf31b244dd894", 0x43, 0x2e5}, {&(0x7f0000001580)="b540c476b14e69a8267d3fb52b4b0d35939ce3efe1487fdcf0cc6897189eaacfa1d7abbbecd0a4797979f692122347951db5462afeccd6aba5ecece18d7efb469c8c8045f59fa5e579a6415e58e002f8ef383f6d9c9604172e998907e49875cc6b9b18054b1df24cad3195f508938bc98326c14d94cb6fb29542c01b429fd0fe7b73c49213cd938c66ab5da6aa8e7e135ceae80d6fffa0ae6d2e63d660e46752e390c4ae610f26ad46c8d1f43388330070df3df58d00825e36be712c2d60e88cc2f9cd30437256d7cfd4c3d4527093f203b1fffcee74031d7ae49997e6429f9eafde1348658f02", 0xe7, 0x38}, {&(0x7f0000001680)="d0678358d3391ffb2482eba9eac9861f3994fe2ff70ed64cfff80c28e90ae938bf05b46d3448c7a644dfb8a3597016cbc73a0e3c24ceee741fd3df714055ad6673c5239d853077dc819f56ae86c9b3704670ce1b4afbbdaaf91be54386c5f86e6c6a5e76dc833a0bae5945be623dbc99170d629321d879561df81aceee78b8143b2b90745c9e6bc390e8f32cae59206f422d44e7ed", 0x95, 0x7}, {&(0x7f0000001740)="8f662dc1b955ff7d46aad488dd54e49c7d83bc1ee936b5df37c7f4f438e088d5eb4d9abf3b4e59f89b48778545f240640dd785e2ee3a18cc277a27742d422803cb341ec1d926276a31e15f442693513060feec15e131b12f42fd411069cc8c65760c55049fea91e267ea80f5274b749090f8136e5eaa03abb6e6b71ffe011d99c6463159847cc474c8f104aa2595d550466b6266d27230", 0x97, 0x3}, {&(0x7f0000001800)="119894c41067c9ad9877315ba2f663d67fa4bb80b8341411d40bdb1a850bb189cb76dd0ca6a68c6bbea7af9e267f34ecd8f961f7adadaf30e110c4452c6088ed0e70096f", 0x44}], 0x200000, &(0x7f0000001980)={[{@journal_checksum}, {@data_err_abort}, {@norecovery}, {@mblk_io_submit}, {@debug_want_extra_isize}, {@data_journal}], [{@appraise_type}, {@smackfsfloor}, {@obj_role={'obj_role', 0x3d, '{/.*,'}}]})
r4 = openat(r3, &(0x7f0000000480)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f00000000c0))
sendfile(r1, r0, 0x0, 0xfffffdef)
r5 = dup(r2)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000000))

14:03:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:03:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101000, 0xc2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_io_uring_setup(0x79e7, &(0x7f00000002c0)={0x0, 0x46c8, 0x4, 0x1, 0x11b, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180))
sendfile(r1, r0, 0x0, 0xfffffdef)

14:03:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x26a)

[ 3118.436265] loop2: detected capacity change from 0 to 40
[ 3118.465464] loop3: detected capacity change from 0 to 40
[ 3118.467138] loop4: detected capacity change from 0 to 40
[ 3118.511163] loop5: detected capacity change from 0 to 40
[ 3118.524419] syz-executor.2: attempt to access beyond end of device
[ 3118.524419] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3118.526016] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3118.533085] loop6: detected capacity change from 0 to 40
14:03:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 43)

14:03:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

14:03:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

[ 3118.744089] loop4: detected capacity change from 0 to 40
14:03:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x300)

[ 3118.875653] loop2: detected capacity change from 0 to 40
[ 3118.919525] loop3: detected capacity change from 0 to 40
14:03:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x3, 0x40}], 0xee00}, 0x18, 0x1)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3119.086930] loop5: detected capacity change from 0 to 40
[ 3119.097057] syz-executor.2: attempt to access beyond end of device
[ 3119.097057] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3119.098837] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:03:15 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:03:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 44)

14:03:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x408)

[ 3119.477578] loop3: detected capacity change from 0 to 40
[ 3119.509113] loop2: detected capacity change from 0 to 40
[ 3119.584996] loop5: detected capacity change from 0 to 40
[ 3119.616716] syz-executor.2: attempt to access beyond end of device
[ 3119.616716] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3119.618691] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:03:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x480)

14:03:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

14:03:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 45)

14:03:31 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x40000, 0xa)
r4 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000100190018000000", @ANYRES32=r4, @ANYBLOB="04000000000000002e2f66696c653000"])
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x77}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x16}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x10)
syncfs(r6)
sendfile(r2, r1, 0x0, 0xfffffdf4)

14:03:31 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14c00e001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:03:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:03:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:03:31 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x64)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x7, 0x9, &(0x7f0000001880)=[{&(0x7f00000002c0)="531958a4736e72189759133d0eff668b122d59e37b35ef986647eb492568851799b96fbd7ed49c6a031b4301d5df7fa4d38b31b0abb1c1f28153f9b265f89164b5138716adf0aecdaf855240d2b7a554dbaeea3b7fb60498b1e9ad7bdb0ab8cd6956b10073f274f5c576742ff995", 0x6e, 0xfffffffffffffc00}, {&(0x7f0000000340)="9603535016bf3b81fef72ae892c6f608813560508ce46600e485fdb052336db0cb0dce68f767b39003e68c8e9adc0f2d4fc873b2c1e497ff3da5abf9d5318170228ab51b9172030e49784eb196deaeede37eb31bfaa17b08efab7f9a035360f2be73de5e6dee94a67dbb41e2aa3484459dc774c1c7346f7665c9a78d8b41349123568d94ae03fc036207511dbe3b428508abb86bb6cb180fc00e8254b82891ff8233cae459fd59d50fd96c1fc604", 0xae, 0x7}, {&(0x7f0000000400)="f050c5b16d630f07b5e93d59e2066d17cb9dc01fb9a3b3e27eab5db4be69e246845f5aa1de8b1191acb97db9ee76ee2d1bb06f2d2417977cab70ba8f2e3640a827992fc3cafc2cfdeea2e5fab6aa49b4c29595f28e4189329ae4599cb61fec9548f907a4c22a", 0x66}, {&(0x7f0000000500)="a3bd942e4164430db6724ba8f512977b3d3c9f5dc992e17d6fa442c5212ab03834c8ab2a54e1d7043410f8fa71a51ca3e6b9d99053788bc8214d330ab721ee061af49a705e95b194b57d6d98095f38e80f303425ebba5e08825e2757ca7d02f8cfc7c50ffcaa4b9ae6f14cb6ffb264a2db21766250e342b982d33555562ec33fb94b673ca4935a99212d3641a6e099973faff5733718a8d5c93b99144b2fd37faf817f7e3c110a70994fc93de5a554113f428b1cee63d147f382cdac53e243f6b874d2c8f3b274f982ff8004c451d7cd2c84ed94a6c39d870892cd6b43d7017b785ca92d3f32e932877b019a59a5013db87f2833666820233eed3bf48c66ad966885e527acaf1b2bd8d7f2fd30a6b89523757439831c122e4935295040a7fc45f61947572b33e9927de396b7bae6a124682d5d98133cf0ae48154eaaa807a96ff3fd7914125170b5b0b314291238574f57a6d90171431baf4408b0da49d46c07500698e7b6efa0eb971c3b3785194575ab91ab5c0e394ff694bc23cd27223d1abd6c937a70995c906a19b2e34239ac765bb3ede345943ed93424819633655378f6ac9e891ab5d4e9b874701d5ae8f6474176b6eff4a2dab1fd2491fece09fce1a5ee458820506a2265b2bd10315b8efc626e3febd8b4c0f64e3a2711044784a2b28582476ab59c09a6ce97a69eb93f8ceedf4df9f3f0a04d418e31ebd7b38707abcf4bc5f48621c4d6216be65241241678af0944814d8da63d6a84ac7bea952e83519025a9b0412ac5c6e0990ad0d633859f40e087eefde5bf7bd2399db59d4c6d1cf0f22d05ca31387aaf320344bec95c8946731cb6139ab800170b5c561bfa0cecd51a65b551d12290b1a6ede150aa44ef646179976d1090dae25c6135527a3e56bcff3ee63d84068db7947343c524d397fde6f2fb627dde9e236905313fc66bf6244c78f728f457a1bd8af56c4d63a92ad28a4378bd5648dfcc3a9b5ce1c60e0685b2993f3cc1a34adb90b133acd7031c50966c620aecf69a07133ef59b4747c9aae47f324de224847ccef29edfc451a7f9b95f128b65453fe3e2d67139ef0d6e5d890afe60399d0bcb17912bc4c74937ec3929c5cd1546a4cdbfc99538dc8b4b77fdf7f64710a6bd6e48fd52b7c2b371e537e8463749bc933224710c4b4f902fcd7f1371218461c0162cde9ef255cc9650565b4e29091e736f3c99b0db264e42b0f22237e2ec72abfe47b215eb3e708125583778e39a074be0f14eea2647c48b478f95622aebf326919d420359bba79ceecf3b2e9586995437609c1cb3b9214dac103862b11231f2c735a25c80976d44f7958f93a76cfd077c075f62739d6a42118979e464547383165154e1d28c58b96394ebe836d17ec61802b2ee4d69449796c030c9f37506a87d494dea6bf6fb34acf078be0c8106a61ab0334616d570f030136e33fc43dab55d3dcaccb97a65c35d512be5b05e5d2e099a218d0d69b58fbf0c8a93e832c704b4ff1a58919a4bca3650b1b7ec954bcecf739082f5694736b84fec8450dd18533ad1ddb198392ede29c170b3be631392abeddf65a69e25175c44dc7c13002a8a59c17ebec753d558873240b0de1f56f657793248446f8f00a6cf0878a3a960e7e5ebc2251eace6046ccf7e9248e967c65f2e52df4fc6d8978f1cd50560cd0049873ba55ae5104267c0c9c64cfd691349fe248bbd578c83425f5d4ae064c9fcaeae69e8b00cb88dcea38a20e7f4f42e55df7886a75b11e214b8a27b296c3c5e355a8b4578132101427e89bc9247d1132912827a8db0d6ec1f8125e7a0b36322c4310f1c81a9c0ff437a738c2c8a4522a6f0f99aab93c781eb75f69168a753a838bfbacdcd64118606262c6f9580deccce18f2f4b6a0d964f5aeb582fe991119c79cc1116f46471141ef186278ea951dfb35104317a0a6a78b6834bfd0ec5b6edfaa3c19a32defd511518509aa9159a4f7492357b69b529e4d557e2887c084ddc53f55cce90af7e175388e1540c25f3c930c56f80d74aedbb48480409f16a9aa7df23ecd45351b5c28eeea6afe0e7f40708620ec80803452f35ae300a9386f141191b13977fbc70da99a96d62d7b6c14dda0fc540ef7d043d55e38ed4bd2e81bbff3227bdf6202add1e4f3d110af06919695f6a8f831346ead52b6ec6da579c3db5fb4defb241e1be3b410b98f0db06b9ecb9072901f130211ccf357f080fdc839f845da6d37eb81e47f61dfc73a2519c03b72a91b36a9a81cc757f5620b86874a1865dc5fac9b0d11e627748e80a0b73477d0072845b73741545e4c5fbbc44b7b3900dcfc91056905dd94196f2f4a8a7879cbca270de27f951edc18f1dd595e58f6647be951e61dd49d0736151d0b52ac38cfd8c253522e9ac42412661ddab37664ea079147a38d0475f433ff022a3c556bd2a473e45a33b86ccb667dfe380a9a3204dfb4d3568cda269a93dfc98f666c8ac3f97de68bc8b478a20f79d7db53fac9622272baded5b0a4dccb35343aae7bee4602cba63a9a3ceeb9f931ddb05019d23b518d09749c2f761902e9d7b8c2c2ffeb713687a7607a41fff11e580a5f1908b3407f48ade1a69ceddb4ce5af53a8b17eec357e1aff3a87fb8b4c04985b744c80eabc3c38eb26a583ea3c341eb09acc93f28d3698ba8e36cec827f1a365e8449452b0e845fab1b5e18ad6a4de6b3b74d4ac70c413f0dffb6ffdc1c3d883493347982f3893e9a6c18e7199d0a928774aea1a1bc2b5dbcb8a1f06d02637d3ef6e493f1e0964931eb2269cfcfb3bd6e987a701a737ee2ef53834c5205b7109e6928476d162ba6b843d7575f8d7a23053be89bb7a0672a3e2584f225464a754a5c257ad0475c80000428ee2d2d9136f6050c170962096925a30e57be2dfdeb7a1b9bb8c37e70362882658b808b11e21d73abfbbd2c25b68f71277c33b59ebca537338626dfd9550fa10172d6c8a6de8ff165cc2384f8c823fdf8938ad34006f46cb2d5e4e382bece42e580b3b53962ff16bf4791bf1abe53edd91f18fb5f7f90f4eab8e17ab517c6f9fef5dd6d75c413079b62471c4ea56c7a40dd10bd36d1763814f41e45b46f87041db3637e6dd98bebbdc62cfd8e0b0b0fdb7f07c2058f340dd274ac7b7d0c7c2f3ffae8670de6b4ac0757184d540a6e87cfe8558c146b70fe963a493ada1f40c8952a4f46be5ea82b25dab83b4e24f8a605667535136fb27b839720c60234641e98e643f5fb7538d759a190156a462c52555f400ac8c8ad34b5852b739ad9b074e64e47e0c1c3422745d2e70921bbccf548dd6b740bbb853dc19738e284e368e92a6568ccabf5855166cb649f9c649c89d1f900447de67b26238ce7c16253c271caabf6de8e37b5e8ccdf80489d268da9d2789e8eca4b0022cbc8282908eda5c57e07bc84877b9f8fac0e116be0bcbbd6e900db5e037764ae4b9356d1ea691f3b58059b6bb2715c8e16d84c0fe5b807f6bcd273bd04251e43fa6989e07c3075634e7f3249bd0f2c0d3cfb58160725efd90bb26a029d6c6afdf12265acad0f15cc907d42a362c822be395d468a79d80f07b861367ccee2f1dca4a8ce3179d881118d2ef38fd79ad4612d35535c23cefd160ef5f8b7733a6c2d7b5b82266eac214ebc152f03c8376117b4dff8aa668a3d33c148440f01503c7a7ea2e912afd9ff945ca86ae5a710f76dd97947a00cc318eddb4faba331e651aacc3712c11f9c68c5680f16a18b73eb874d2ceef13a97f6d0d978c9f4b9f8534191805e007ec5b8e33562f3b060d7beac1e78e44def885edd31a1bd4b412cb2d315d2edfab0e06dcd49bfc9723c9368ca6a6f285f9a1e6707ced2d8eb72a6de1f540bcbdebeb3faed776087bd2ff33bdd9b9c28a4aed01e4e82577a91c95df416b62e661d2dce1feeded91fefc6b063f650383ea45209896699b12a8974d90037b257a2fae9f0dc2cbb2bdfa4565adebf92c1a64c4c84d86c8094f0f90f1ba8a6e5c9a0d0589fee2d00f76cf69e27e6737483a8e620cd33e13711a1336f39360751fe1ac2b9a742d26e008ef25da98b524526ee27479880050ac1dd7e45598c7b050a4f49e470d1b1d42f45a7187acdbb4c6c5c8d074beebe14b809ef6a28a8a10c78a089daeb0ced1f21698bb7fc1f992488997fbc3bbb01c0a0d70f6bf6157043576b793158617942aa7e6940d67e19ae8a627a5f5d7a3fb65a044768a7b99c4742308aa35c9021a3c5a15723288faaeee45468f54c6ddd5615ff41f820260795b3b5218244959c564eec021d68eda014d78a56d9e9a508efba2723573b5ebf99b70a291d6134d16c352cecfad167271ffe5798b2f1e798ff3ee8d3d974aec9192cb2228cb1f816ebb2eeae082b18e5a23ddfa7f64878e9ef7afa0a52f925d795ea3045f53689c46e89c5040b91f77f64988884aac8aefb33a48d5de55f76200b0368680fd8ba0d340e41a51929cab9a068567308e196e0b7dcd6b8d184983906de82bb29388aaad333bbd226db406d70f5130704082ece2553206aebe4769e4c0dab3959bbd007aa2b968e205363eef98b07783c4a464cc8ee4da04f92714a50b15b8216b812d23edcfb8fbb442ef6c936437b12aa2d69aa7dba6b5f867a213b4cf4c32ebe2fa34059c66029a6dc34807a01a4a9e121c74e038a2d3ec03bf37302c24b3737a6fec8b93c53b6cff5c92eb206a437747903b445109f83d8e0cb22dbcd164cbddf5f0986fc08d715424a5531c150f2ab007a7e5654b80c0c31df04185b0d76162747b2ff5ac0bac6ff861fd49e825f8ead1375990339ed0bd9a9c70793727586e56a271358d3b8b40f18f1a15fa4ece8353aa2250750b0c1c0a0735138af12f71ea7d814c374e0b7f81cccafb4b3785d29c1cc74772b0b5cd2a26b8bc7ccae56da9cdeb4558e046736bbb52a34e2d1d9c0ead977a9dbd7bcde68e948d4fbf91dfc1a7c1e85662b1d4dcda6ad3e62ce0576379a48cc65b863f52b6f69c01e562f874c8b040962677f1f9ea9c4ccb10ed9bff054275922663f272f9bebe332fd1b6a6471bc6ccaf3bce9ea8de58d11a8b1776d48ccf0950b605c4d1b6f4cba00c7962cd965ac33c81383dfaf7744c252ba9b257508d8e438fd1cd7fe1a6353a5884756b95a686210e9ac56a69e6f24e71b2f1701ea12a1fc1986893d29fdabf394500958a2760e0b4422e9a82e9056645d1fe4a90ff72258677d2835b3c3ec66d50f10fd80d30f7bd9a772ee53093ee78bd0fe22c22f267e168f9e06fcf5b9fa0221884b817882bd02cc374ae40062855d521e316c123add8a9741cf1d8234bb8be6f4e92b2cc305a2667ed13fcbeddd900eb3e742c766fab346449c3958679b58b0497b462af330f8d166208260d41674fdbcafab7ee556de0d5bac450e166ceee16a1beaa58985ca1e20baa3642f8d33682342cf6cbc6d75073a9bd97793d9cb93b64a444cabe92a6725835eda5f542e31309a93d0fbba3244cf1c944a6380826ddb8f3b68f29b15319d520fcf0d34d75f856a4387a7225ced2f5978e9a65c9e09e7c03e4dc961f1e2a54b43ce35206ca8144e6931f9e6ec0f55c57534ed0433bc296b9518de379aa1d26a0714c687675f7d774248df1bada8bb8b39607f450ed393ed7d82e9fd6d9caf62957f45389725a7115ecb658e96ac833ede6675f97ab779319a4fcafeec9398e31ec27f2ce0c69919f07bdd84d642e9d009deded4ec47d6c8bac7b81ef2d002f450fcd0c4b52a7ccdf261364013ab3ce1f84f1f3af101cc60f529835c9d99b275e137eff02", 0x1000, 0x100}, {&(0x7f0000001500)="307698f9f5d3d895dd431d82587c9ab32ade7da4c45995ff32e0f06aa051fde55d68f436d308eeb7abc4493f6386ad9d0ee83d955594d4072b1f2e86ddf31b244dd894", 0x43, 0x2e5}, {&(0x7f0000001580)="b540c476b14e69a8267d3fb52b4b0d35939ce3efe1487fdcf0cc6897189eaacfa1d7abbbecd0a4797979f692122347951db5462afeccd6aba5ecece18d7efb469c8c8045f59fa5e579a6415e58e002f8ef383f6d9c9604172e998907e49875cc6b9b18054b1df24cad3195f508938bc98326c14d94cb6fb29542c01b429fd0fe7b73c49213cd938c66ab5da6aa8e7e135ceae80d6fffa0ae6d2e63d660e46752e390c4ae610f26ad46c8d1f43388330070df3df58d00825e36be712c2d60e88cc2f9cd30437256d7cfd4c3d4527093f203b1fffcee74031d7ae49997e6429f9eafde1348658f02", 0xe7, 0x38}, {&(0x7f0000001680)="d0678358d3391ffb2482eba9eac9861f3994fe2ff70ed64cfff80c28e90ae938bf05b46d3448c7a644dfb8a3597016cbc73a0e3c24ceee741fd3df714055ad6673c5239d853077dc819f56ae86c9b3704670ce1b4afbbdaaf91be54386c5f86e6c6a5e76dc833a0bae5945be623dbc99170d629321d879561df81aceee78b8143b2b90745c9e6bc390e8f32cae59206f422d44e7ed", 0x95, 0x7}, {&(0x7f0000001740)="8f662dc1b955ff7d46aad488dd54e49c7d83bc1ee936b5df37c7f4f438e088d5eb4d9abf3b4e59f89b48778545f240640dd785e2ee3a18cc277a27742d422803cb341ec1d926276a31e15f442693513060feec15e131b12f42fd411069cc8c65760c55049fea91e267ea80f5274b749090f8136e5eaa03abb6e6b71ffe011d99c6463159847cc474c8f104aa2595d550466b6266d27230", 0x97, 0x3}, {&(0x7f0000001800)="119894c41067c9ad9877315ba2f663d67fa4bb80b8341411d40bdb1a850bb189cb76dd0ca6a68c6bbea7af9e267f34ecd8f961f7adadaf30e110c4452c6088ed0e70096f", 0x44}], 0x200000, &(0x7f0000001980)={[{@journal_checksum}, {@data_err_abort}, {@norecovery}, {@mblk_io_submit}, {@debug_want_extra_isize}, {@data_journal}], [{@appraise_type}, {@smackfsfloor}, {@obj_role={'obj_role', 0x3d, '{/.*,'}}]})
r4 = openat(r3, &(0x7f0000000480)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f00000000c0))
sendfile(r1, r0, 0x0, 0xfffffdef)
r5 = dup(r2)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000000))

[ 3135.272668] loop4: detected capacity change from 0 to 40
[ 3135.285882] loop5: detected capacity change from 0 to 40
[ 3135.288354] loop2: detected capacity change from 0 to 40
[ 3135.289747] loop6: detected capacity change from 0 to 40
[ 3135.292768] loop3: detected capacity change from 0 to 40
[ 3135.432985] FAULT_INJECTION: forcing a failure.
[ 3135.432985] name failslab, interval 1, probability 0, space 0, times 0
[ 3135.434870] CPU: 0 PID: 14247 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221207 #1
[ 3135.435935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3135.437057] Call Trace:
[ 3135.437411]  <TASK>
[ 3135.437721]  dump_stack_lvl+0x8f/0xb7
[ 3135.438248]  should_fail_ex.cold+0x5/0xa
[ 3135.438819]  should_failslab+0x9/0x20
[ 3135.439344]  __kmem_cache_alloc_node+0x5b/0x400
[ 3135.439968]  ? iter_file_splice_write+0x169/0xcb0
[ 3135.440646]  ? iter_file_splice_write+0x169/0xcb0
[ 3135.441298]  __kmalloc+0x46/0xc0
[ 3135.441760]  iter_file_splice_write+0x169/0xcb0
[ 3135.442383]  ? generic_file_read_iter+0x330/0x550
[ 3135.443049]  ? generic_file_splice_read+0x1bc/0x4d0
[ 3135.443716]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3135.444511]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 3135.445191]  ? preempt_schedule_common+0x59/0xc0
[ 3135.445823]  ? inode_security+0x105/0x140
[ 3135.446388]  ? security_file_permission+0xb5/0xe0
[ 3135.447021]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3135.447698]  direct_splice_actor+0x113/0x180
[ 3135.448323]  splice_direct_to_actor+0x33a/0x8c0
[ 3135.448925]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3135.449560]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3135.450205]  ? security_file_permission+0xb5/0xe0
[ 3135.450836]  do_splice_direct+0x1bc/0x290
[ 3135.451366]  ? __pfx_do_splice_direct+0x10/0x10
[ 3135.451974]  ? lock_is_held_type+0xdb/0x130
[ 3135.452568]  do_sendfile+0xb1d/0x1280
[ 3135.453098]  ? __pfx_do_sendfile+0x10/0x10
[ 3135.453659]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 3135.454310]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 3135.455016]  __x64_sys_sendfile64+0x248/0x2a0
[ 3135.455590]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3135.456250]  ? rcu_read_lock_sched_held+0x42/0x80
[ 3135.456883]  do_syscall_64+0x3f/0x90
[ 3135.457366]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3135.458043] RIP: 0033:0x7f61b5a02b19
[ 3135.458525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3135.460696] RSP: 002b:00007f61b2f78188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3135.461709] RAX: ffffffffffffffda RBX: 00007f61b5b15f60 RCX: 00007f61b5a02b19
[ 3135.462608] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 3135.463503] RBP: 00007f61b2f781d0 R08: 0000000000000000 R09: 0000000000000000
[ 3135.464450] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 3135.465361] R13: 00007ffdbc84f80f R14: 00007f61b2f78300 R15: 0000000000022000
[ 3135.466301]  </TASK>
14:03:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:03:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3135.549651] syz-executor.6: attempt to access beyond end of device
[ 3135.549651] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3135.551354] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3135.624128] syz-executor.6: attempt to access beyond end of device
[ 3135.624128] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3135.626194] Buffer I/O error on dev loop6, logical block 10, lost async page write
14:03:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x500)

14:03:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3135.725663] loop3: detected capacity change from 0 to 40
14:03:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

14:03:32 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = pidfd_getfd(r0, r0, 0x0)
openat(r2, &(0x7f0000000000)='./file1\x00', 0x200000, 0x48)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3135.899520] loop5: detected capacity change from 0 to 40
14:03:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:03:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 46)

[ 3136.064130] loop6: detected capacity change from 0 to 40
14:03:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x600)

[ 3136.216950] loop3: detected capacity change from 0 to 40
[ 3136.217736] loop2: detected capacity change from 0 to 40
[ 3136.228011] syz-executor.6: attempt to access beyond end of device
[ 3136.228011] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3136.229265] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3136.330498] syz-executor.2: attempt to access beyond end of device
[ 3136.330498] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3136.331688] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3136.355546] loop5: detected capacity change from 0 to 40
14:03:51 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:03:51 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x700)

14:03:51 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47)

14:03:51 executing program 4:
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

14:03:51 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={0x20400, 0x8a, 0x7}, 0x18)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/sysvipc/msg\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r1, {0x80000001}}, './file0\x00'})
r2 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff8, 0x7, &(0x7f0000000980)=[{&(0x7f0000000400)="e868cf1ce8d3c08634952b4721ee871fa9bea1199786757cba2abde816c197b9953ada7a4101fc4df55d637e46dfeb8affa05a36c0ac630dd3ccff320c4780dbaa6120eb03e95fb0be4c90e593f24c2811f018ee3048e62e1a8ca49e4fc9e1d39fbb12d7f670e4fbc63b59da59c81ecf2a8e35244a0ce11890ec0e20e47eac0e6431b7bc3aed9184129cad5697c39f3c3465bf1954c706be5185bfafb275ff2ed90da61a2571fb9d461088d5159fccb522a34189a54cbf417b696c30d0bc678de75d8ff049b1178c68f33cacbb920cf85449189363aecdf6ded36d49bef8169a242b5e3c96bc560600428d22277589a2e9", 0xf1, 0xd6d2}, {&(0x7f0000000500)="ee8093e53a40ff28a0a46cf42981fe17b19d0f5dc8c6f6c1381183276f6956e25c56eae85431388e2439027ec5d4fb68ca377aed4f0be6d00ecedc84baf12bced5ac61399fee598c588b0f89420958bb63b5fe65e1433cf33f63d9b411f0b08c92bffd38ddabc65865ad332a607ac9bf50049bb5b07497321c356ed53274257f23f3095ca80f4793976bbfcbd4d5f3f45aaf143e", 0x94, 0x74}, {&(0x7f00000005c0)="c7fe4888c2d69401caadcb6d2af470102dd5d1825cafef8f839d234349502be53adf1df7c68585f2de7e1f2aca9e227429cec1467b7d505f6b3a99e901c1715084a1c8d67f47e7541ff592f2854f11646ab0681cb2b94021ad93b06e952c211fee8f65826f5b5285f7a03bb1dc451f1139769eff15821e02ce86ff93332a679d42f5501df85eab748f3018d71b6414650b2c078eae44a29c35987e0943add4bd2c42a772d3d179ba0240478c2fd3d10c9b273e", 0xb3, 0x100000000}, {&(0x7f0000000680)="7b82c3429acde57feda7e7ceb15f24c7ffe90e493d38d27b19dea7f77fc55ededa29ee551d63e081e7bd31ef8aefd8341982633395f26b5f0e7e09fd0346083ffb799298d407003bdb8bbfa0a117263da0b01ae843ac923bd5ebe7841ab9dd1453590ffdb4cb249a63304eaaa25b9493284416663f1438e51596af132703c92c0ce22e0f824ab240f38ae281172774877b86d40dfdda388c75bc7b4c1438495af844a196241962dd1ce0934ec7c7b92269337332a7c4a5054e257df5c6804588711dc0897d6a475b66a2697c91bfcfb0abc0935bd9efb1e229f1b2f58d2294c6a41143e7d354ea00a54968cdfb712f3b6049ae164b", 0xf5, 0xfe000000000000}, {&(0x7f0000000780)="0e707f73952f15bef7a0a71f643ceb34626fab4440b27f828f4b70adc47398364b2659779f209429650233d9300de997e059eec250852d17fbd50d3cd65bfea7119d3c555f63c817c0481ef757909e934e84bc9cf08f6ab53a406d02dc9457891654c10a99d03f51390ec9934b721e8b487eb989c7741c283618e1c242d477c902fe778a8bbe372cef723fbf5bba9a35ecd7b7030376a56254320b0fa46b6774e317399b0c4663fb6209be46fadfa5744e6954ce6bf69bbf8c0b7017ebeb0b02729519ad11c5bb6b8ad4185c74e6ab0f269491ea573fb0c3d8b601d4b72aa9d1721c1017fca2c5302a1046d1ea20141916b576ae97", 0xf5, 0xffffffff}, {&(0x7f0000000880)="dfc46881689da5b0d1da784ffbb2ea2deddb3a2e82b9ea342e2b4015a275a663cf1e5fca0dee3a91cf78e03abfffdedc4ab39b608c64a4a7ae436d089e6871ae172c45b5171a05f7f800e8758f0f7d1de72d7ae2aad87d9dc783849fad3142e7851a1612c7576ad50f585d210e1e61015c5773259dff426b4b5830e0054858a950f9b437d3d7eda7f504e667086cb21b09904c66310d7df71e46aaf870420563fa95af7f708b0a03b280ed", 0xab, 0x3}, {&(0x7f0000000940)="24fdff7d489e8138", 0x8, 0x4}], 0x10000, &(0x7f0000000a40)={[{@map_off}, {@check_relaxed}, {@utf8}, {}, {}, {@nocompress}, {@overriderock}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0xdc2e}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_type}, {@subj_user={'subj_user', 0x3d, '&/&:%+-,\'!][\''}}, {@euid_gt}, {@uid_gt={'uid>', 0xee01}}]})
linkat(r0, &(0x7f0000000180)='./file1\x00', r2, &(0x7f0000000b40)='./file1\x00', 0x1000)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000080000000a1f443efef137ade926499a413ed8e5b85e7221b2eabc4407e53acb969172c7f19c84c56e0a2eb4629b322a12f5c496480c53d62c6a51db5012d2aa39ef60a98f7d2823de2f47f3ce9421b1e5b93cbcdbdea125516332ae645515abc1e8d283dd0af9b80f59c31cad8c29c3b4da5bcaab795e21a1446e8bdcfad3f4c0298789685132ff6fca18ee4dd76047e6c9e20ecf04781d989dd0"], 0xb8}}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r6)
sendfile(r4, r3, 0x0, 0xfffffdef)

14:03:51 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

14:03:51 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[@ANYRES16=r4], 0x220)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r6)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:03:51 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140014001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

[ 3155.341874] loop3: detected capacity change from 0 to 40
[ 3155.341887] loop5: detected capacity change from 0 to 40
[ 3155.343574] loop6: detected capacity change from 0 to 40
[ 3155.349725] loop2: detected capacity change from 0 to 40
[ 3155.521505] syz-executor.2: attempt to access beyond end of device
[ 3155.521505] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3155.523318] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:03:51 executing program 4:
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

14:03:51 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

14:03:51 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x804)

14:03:51 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:03:51 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = inotify_init()
ftruncate(r2, 0x2)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', <r5=>0x0, 0x0, 0xfa, 0x87, 0x2, 0x40, @private0, @private2, 0x1, 0x8, 0xd22, 0x3}})
sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=@newpolicy={0x130, 0x13, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e24, 0x6, 0x4e20, 0x5, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {0x80000000, 0xadd1, 0x400, 0x7ff, 0x7, 0x80000000, 0x6, 0x800}, {0x9cb, 0x1000, 0x3, 0x200}, 0x6, 0x6e6bbb, 0x0, 0x1, 0x1}, [@replay_thresh={0x8, 0xb, 0x10001}, @encap={0x1c, 0x4, {0xfffffffffffffffc, 0x4e23, 0x4e24, @in6=@mcast2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x40}, @encap={0x1c, 0x4, {0x1, 0x4e23, 0x4e21, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd28, 0x507}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2d, 0x800}}, @XFRMA_IF_ID={0x8, 0x1f, r5}]}, 0x130}}, 0x4090)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:03:51 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48)

[ 3155.815796] loop3: detected capacity change from 0 to 40
[ 3155.831561] loop5: detected capacity change from 0 to 40
14:03:52 executing program 4:
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3155.901966] loop6: detected capacity change from 0 to 40
14:03:52 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000007a0000000000000000000000000000000000000031a926c391007f2d000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3155.971856] loop2: detected capacity change from 0 to 40
14:03:52 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0xf00)

[ 3156.079167] syz-executor.2: attempt to access beyond end of device
[ 3156.079167] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3156.080622] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3156.087311] syz-executor.6: attempt to access beyond end of device
[ 3156.087311] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3156.089262] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3156.118692] loop5: detected capacity change from 0 to 40
14:04:09 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105042, 0x0)
openat(r0, &(0x7f0000000180)='./file1\x00', 0x50820, 0x68)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x40)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190000000000000005000000000000e24e4167329ede4ab145401e190000000000000000000000007f8c0000005386911778028f35ce9b9a3ce3f70ec9f74883768edb21b97c4e5ee39b45b9ab52227bff3ef719eeea6e55277e3ec6862580b3e08c82635ffe23fc99b580c1152a1ee640f0e1bc2a415fe7adb57f23a65837569889551a9e786ae511b27ded11d9533f19e598f5f07c230ba4b659a8e168db74f4ea63f9aeefa65f8cbdea151b116bf0defa39385e82dc6953b0b5978aa63b54352aae454b43467177b25fa7bb6373c1db2c84b96321"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000190001000000007a00000000000000000000000000000000000020007f8c000100000000000000000000090000000000007a50ac6c0000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a", @ANYRESDEC=r5, @ANYRES16=r0], 0xb8}}, 0x0)
getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000500)=""/199, &(0x7f00000000c0)=0xc7)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file1', [{}, {0x20, 'vfat\x00'}, {}, {0x20, '&{'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, '-'}, {0x20, 'vfat\x00'}, {0x20, '}$^^@).'}, {}], 0xa, "f02fe7eb70c478d03c8effab0408c3fcb96a2a0d418aa7261c88ecf3ccacfec52d43a742075f634cbccfb13bb91efa66d57bfa810fe28e6d20c1532078bf6c2b1150b9b4b2137cf652e5604d9f05392263bd7db698ed49ca6f9620ddeb2e96bb7856be9d72d81ca8a7eb8d84230faf8b4d8c4eaa1d648d2c9d7d258b303357801c7da21c1f4ece25a64984fa8e71a264718e14ea9415e471eddbe642266fe2d69839cca61bc2cf5c8e0c37fc21b5556c3cfc11ec56aa0b6f91a3484e9dd0048e1b8febd71dbf1c3510dca1a546798189bed881fd852f608aa7e4250bc03c6dced7639b46119e8a48be74a7a9"}, 0x11f)
syncfs(r6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000006c0)=@getsadinfo={0x418, 0x23, 0x1, 0x70bd2c, 0x25dfdbfd, 0x0, [@replay_esn_val={0x20, 0x17, {0x1, 0x3, 0x70bd2a, 0x70bd2c, 0x70bd2b, 0x4, [0x7c7]}}, @algo_auth_trunc={0x145, 0x14, {{'ghash-generic\x00'}, 0x7c8, 0x180, "ea53c6a54d61b9b3697e4acd67fb0431270177fb13d14cab638f857983a36987989e7d4645a2e1cf3179847cc8c9e16ccf889c627b5f40240627fc26ee4e13731b339a0eb87799ba210cdbbf8bc6abd5abe2101328ac8d48349051a6a03d2f5c3d672890e6ad39c4c756d54954b06b880ff0284d1671a0e8b1b101c501ac3d33d01cdd9273037ee07b943b06b8a8a5869694a5b9d6df17ce9bad645bbc5832807b049ea8daa687c2c77ec7e111d7260b02485bc9ceb52d9026339e69e12b56e5fd5191aec814576503f14dc8a3c30beb75d59673e85d889ce64a4806a50608128bf8bbd7e3f08c42c5719170a121368f5dbd71d7d731e41bcf"}}, @algo_auth={0xf6, 0x1, {{'michael_mic\x00'}, 0x570, "6a22668f0ec4fc0b7f8589973eb9e0c1933baa538c2202aba1ec4c29773d58b66e7595065234c45d409947def0b6a8686c225fb6088af83cd1dff7b2c380ac1054760a13e55f42aad094dda188298726748ec8931e53919df74df52cbe1607ccfc97a0008953f64641c5464138c2f50eaa9f67af6e4b927b7b1499792f90e72a5ea33d97e534db3f9aa6a49ff4ad6cbb8d03904f0d18f8f6183564ed71a19af1988ebcd0a8157be2e800bdf6b025"}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd27, 0xfffffff7}}, @algo_auth={0x67, 0x1, {{'sha256-avx2\x00'}, 0xf8, "2a3e629d9fcbeaebc0c80b53786c71e7a8c5e45cc82a3e74009d838f698354"}}, @algo_crypt={0x12a, 0x2, {{'ecb(arc4)-generic\x00'}, 0x710, "56875f2742a9f23bdfd879d95db3adc9e731acd27d2ce0eb27bb112e878dc2c6db2d3fe1e396e401232dea316ff24351c6886dc96ade7b9af66115e92166aeda6204de2baaddafe16b3ddd5d5a954ba6f5d9ed380f3fe4dfb03c448e1c4c5f88a744363161a6d3ba8bd123717a3a3416f5d806fa1c411a5d28c2482ecd7392b4d1d6fe5ad6c73fcae5a14a8ead28e6ad52501ac4f5ff91614310fcb7b2fa06b8f72659e26796cc93ee072087ef271249c7a6d21a03f4f5f0b41c7645d4a8a1e57c365eb07239a75e33df81bbb5744b91bba2c78c05fedf5a6509267def8a546dd378"}}]}, 0x418}, 0x1, 0x0, 0x0, 0x801}, 0x80000)
sendfile(r2, r1, 0x0, 0xfffffdef)

14:04:09 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:04:09 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3173.854906] loop3: detected capacity change from 0 to 40
[ 3173.866067] loop6: detected capacity change from 0 to 40
14:04:09 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14001f001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:04:09 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x2c0440, 0x93)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101000, 0x42)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007fa9994ceb1ed7a622f9dc0e00000000000100000000000000001e00000000000000000000000a"], 0xb8}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat(r2, &(0x7f0000000180)='./file2\x00', 0x40001, 0x3)
syncfs(r6)
sendfile(r3, r0, 0x0, 0xfffffdef)

14:04:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x1300)

14:04:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:04:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49)

[ 3173.873453] loop4: detected capacity change from 0 to 40
[ 3173.910556] loop5: detected capacity change from 0 to 40
[ 3173.921989] loop2: detected capacity change from 0 to 40
14:04:10 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

14:04:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:04:10 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(r0, &(0x7f0000000000)='./file0\x00', 0x42080, 0x100)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
sendfile(r2, r1, 0x0, 0xfffffdef)

14:04:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x1800)

[ 3174.086450] loop6: detected capacity change from 0 to 40
[ 3174.102119] syz-executor.2: attempt to access beyond end of device
[ 3174.102119] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3174.104201] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3174.140633] loop5: detected capacity change from 0 to 40
14:04:10 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105042, 0x0)
openat(r0, &(0x7f0000000180)='./file1\x00', 0x50820, 0x68)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x40)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190000000000000005000000000000e24e4167329ede4ab145401e190000000000000000000000007f8c0000005386911778028f35ce9b9a3ce3f70ec9f74883768edb21b97c4e5ee39b45b9ab52227bff3ef719eeea6e55277e3ec6862580b3e08c82635ffe23fc99b580c1152a1ee640f0e1bc2a415fe7adb57f23a65837569889551a9e786ae511b27ded11d9533f19e598f5f07c230ba4b659a8e168db74f4ea63f9aeefa65f8cbdea151b116bf0defa39385e82dc6953b0b5978aa63b54352aae454b43467177b25fa7bb6373c1db2c84b96321"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000190001000000007a00000000000000000000000000000000000020007f8c000100000000000000000000090000000000007a50ac6c0000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a", @ANYRESDEC=r5, @ANYRES16=r0], 0xb8}}, 0x0)
getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000500)=""/199, &(0x7f00000000c0)=0xc7)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file1', [{}, {0x20, 'vfat\x00'}, {}, {0x20, '&{'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, '-'}, {0x20, 'vfat\x00'}, {0x20, '}$^^@).'}, {}], 0xa, "f02fe7eb70c478d03c8effab0408c3fcb96a2a0d418aa7261c88ecf3ccacfec52d43a742075f634cbccfb13bb91efa66d57bfa810fe28e6d20c1532078bf6c2b1150b9b4b2137cf652e5604d9f05392263bd7db698ed49ca6f9620ddeb2e96bb7856be9d72d81ca8a7eb8d84230faf8b4d8c4eaa1d648d2c9d7d258b303357801c7da21c1f4ece25a64984fa8e71a264718e14ea9415e471eddbe642266fe2d69839cca61bc2cf5c8e0c37fc21b5556c3cfc11ec56aa0b6f91a3484e9dd0048e1b8febd71dbf1c3510dca1a546798189bed881fd852f608aa7e4250bc03c6dced7639b46119e8a48be74a7a9"}, 0x11f)
syncfs(r6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000006c0)=@getsadinfo={0x418, 0x23, 0x1, 0x70bd2c, 0x25dfdbfd, 0x0, [@replay_esn_val={0x20, 0x17, {0x1, 0x3, 0x70bd2a, 0x70bd2c, 0x70bd2b, 0x4, [0x7c7]}}, @algo_auth_trunc={0x145, 0x14, {{'ghash-generic\x00'}, 0x7c8, 0x180, "ea53c6a54d61b9b3697e4acd67fb0431270177fb13d14cab638f857983a36987989e7d4645a2e1cf3179847cc8c9e16ccf889c627b5f40240627fc26ee4e13731b339a0eb87799ba210cdbbf8bc6abd5abe2101328ac8d48349051a6a03d2f5c3d672890e6ad39c4c756d54954b06b880ff0284d1671a0e8b1b101c501ac3d33d01cdd9273037ee07b943b06b8a8a5869694a5b9d6df17ce9bad645bbc5832807b049ea8daa687c2c77ec7e111d7260b02485bc9ceb52d9026339e69e12b56e5fd5191aec814576503f14dc8a3c30beb75d59673e85d889ce64a4806a50608128bf8bbd7e3f08c42c5719170a121368f5dbd71d7d731e41bcf"}}, @algo_auth={0xf6, 0x1, {{'michael_mic\x00'}, 0x570, "6a22668f0ec4fc0b7f8589973eb9e0c1933baa538c2202aba1ec4c29773d58b66e7595065234c45d409947def0b6a8686c225fb6088af83cd1dff7b2c380ac1054760a13e55f42aad094dda188298726748ec8931e53919df74df52cbe1607ccfc97a0008953f64641c5464138c2f50eaa9f67af6e4b927b7b1499792f90e72a5ea33d97e534db3f9aa6a49ff4ad6cbb8d03904f0d18f8f6183564ed71a19af1988ebcd0a8157be2e800bdf6b025"}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd27, 0xfffffff7}}, @algo_auth={0x67, 0x1, {{'sha256-avx2\x00'}, 0xf8, "2a3e629d9fcbeaebc0c80b53786c71e7a8c5e45cc82a3e74009d838f698354"}}, @algo_crypt={0x12a, 0x2, {{'ecb(arc4)-generic\x00'}, 0x710, "56875f2742a9f23bdfd879d95db3adc9e731acd27d2ce0eb27bb112e878dc2c6db2d3fe1e396e401232dea316ff24351c6886dc96ade7b9af66115e92166aeda6204de2baaddafe16b3ddd5d5a954ba6f5d9ed380f3fe4dfb03c448e1c4c5f88a744363161a6d3ba8bd123717a3a3416f5d806fa1c411a5d28c2482ecd7392b4d1d6fe5ad6c73fcae5a14a8ead28e6ad52501ac4f5ff91614310fcb7b2fa06b8f72659e26796cc93ee072087ef271249c7a6d21a03f4f5f0b41c7645d4a8a1e57c365eb07239a75e33df81bbb5744b91bba2c78c05fedf5a6509267def8a546dd378"}}]}, 0x418}, 0x1, 0x0, 0x0, 0x801}, 0x80000)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3174.184828] syz-executor.6: attempt to access beyond end of device
[ 3174.184828] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3174.186746] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3174.211924] loop4: detected capacity change from 0 to 40
[ 3174.215885] syz-executor.6: attempt to access beyond end of device
[ 3174.215885] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3174.217613] Buffer I/O error on dev loop6, logical block 10, lost async page write
14:04:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50)

[ 3174.287427] loop3: detected capacity change from 0 to 40
[ 3174.410507] loop2: detected capacity change from 0 to 40
[ 3174.604963] syz-executor.2: attempt to access beyond end of device
[ 3174.604963] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3174.606724] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:04:38 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14024e001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:04:38 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r0)
execveat(r0, &(0x7f00000014c0)='./file1\x00', &(0x7f0000001600)=[&(0x7f0000001500)='nr_blocks', &(0x7f0000001540)='/proc/diskstats\x00', &(0x7f0000001580)='MAY_EXEC', &(0x7f00000015c0)='\\}+\x00'], &(0x7f0000001740)=[&(0x7f0000001640)='-\x81+.-\'.,\x00', &(0x7f0000001680)='MAY_EXEC', &(0x7f00000016c0)='+$\x00', &(0x7f0000001700)='#@-[[\\/\x00'], 0x100)
r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="7ecc9d3d1fd694b15b63b9365642403152a3fa245c1abef1d9f3a4dfc7b0c21a2e89bc9171450ede8fc9f0c7d3a4f7481a6c1b601b75b9ecc05a16af417e54bf5ce608984d87f0ba46afddd94b1e633d7787e82f7db6b8c718d09df8e7e9498031bf148716f8769a4342f842faf973ff8fa958a78ad96bd3d559cbdb8464a0953b91e2365355319144abeb573ab0a8c977b286b89063b9a699ee64201de81d41de1188c5d51db6", 0xa7, 0x9}, {&(0x7f0000000380)="3edcf38be60f3ed3f4684bcf7f495fde478797ef0a2289a21c9d09b0651a6d378cb8a43a8ce09b2a2b6239f7ea3745b96652f9df9070133b4a8c447255a9ae38584d2420b3407336be9dd4c6a166763d4c7bb298af9199d96138d963cdadafdcadd2080a3041e5cd1902b9f9cc2be46d6e86e669beff1c551ba766680321fcaede3cfdd861392e38c9927e3cfb32ae59bf0d5be1c385362acd170ecf7978b09ed6c7e4fae54a0499e0209a4cf836839b1718754b5fd5d673ba9e2f213d5013f07a96e763cc927e353f2192b484fea5f58f237e003563aa3d5a59e7a806f2a6", 0xdf, 0x5}], 0x800c0, &(0x7f0000000480)={[{@nr_blocks={'nr_blocks', 0x3d, [0x37, 0x67, 0x35, 0x39]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x32, 0x37, 0x32, 0x6d, 0x30]}}], [{@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r4}, "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"})
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xb8}}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r6)
sendfile(r3, r2, 0x0, 0xfffffdef)
sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000001c40)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c00)={&(0x7f00000017c0)={0x420, 0x3f3, 0x2, 0x70bd26, 0x25dfdbfc, {0x10, 0x0, 0x1c, [0x8, 0xfffff800, 0x9, 0xffff0112, 0x6, 0x2, 0x6, 0x7, 0x4, 0x1da, 0x4, 0x1000, 0x8001, 0x2c2b, 0x4, 0x80, 0x8, 0x825556a, 0x0, 0x7, 0x4, 0xe071, 0x2, 0x4941, 0x7fff, 0x1, 0x8, 0xfffffffa, 0x7fff, 0x800, 0x4f3, 0x0, 0x4, 0xff, 0x2, 0xf6f, 0xfffffffe, 0x1f, 0x9, 0x8, 0x5, 0x9, 0x6f67, 0x3, 0x80, 0x3, 0x2, 0x7, 0x1, 0x20, 0x7fffffff, 0x6, 0x4, 0x0, 0x8, 0x9, 0xcff4, 0x4, 0x4, 0x8000, 0x7b, 0xfffffffc, 0x6b62, 0xeb0], [0x1, 0xe093, 0x3c69, 0x7fff, 0x6, 0x6, 0x7, 0x8, 0x7, 0x63, 0x0, 0x2, 0x800, 0x6, 0x8000000, 0x5, 0x7, 0x19b3, 0xfffffff8, 0x8, 0x2c25, 0xfffffffc, 0x7, 0x3ff, 0x0, 0x101, 0x8, 0x1, 0x7, 0x10001, 0x6, 0x3b, 0x9, 0x5, 0x5, 0x0, 0xffffffff, 0x2, 0x10000, 0x97ec, 0x3, 0x2, 0xc1, 0x2, 0x43ad, 0x7, 0x5, 0x0, 0x8, 0x81, 0x3, 0x7ff, 0x5, 0x1, 0x0, 0x81, 0x1, 0x6, 0xba, 0x9, 0x4, 0x9, 0x8, 0x7], [0x5, 0x8001, 0x7, 0x4, 0x3, 0x1, 0x9ae7, 0x100, 0x9744, 0x3d9, 0x81, 0x6, 0x3, 0x9e5, 0x100, 0x9e, 0x3ff, 0x80000000, 0x20, 0x3, 0x68, 0x80000001, 0x8000000, 0x4, 0x400, 0x89a, 0x1, 0x2, 0x8, 0x401, 0xfffffffa, 0x6, 0x80000000, 0x6, 0x5, 0x4, 0x0, 0x0, 0x8, 0x3, 0x2, 0x7ca, 0x1000, 0x7fffffff, 0x80000000, 0x4, 0x9, 0x101, 0x7, 0x5, 0x5, 0xffffa4e6, 0x8, 0x7, 0x2, 0x2, 0xffffb5cb, 0x0, 0x7, 0x7fffffff, 0x8000, 0xffffffff, 0x3e3, 0x4], [0x0, 0x0, 0x7, 0x8, 0x80000001, 0xfff, 0x6c99, 0x5, 0x0, 0x0, 0x1, 0x1000, 0x1, 0x7, 0x3, 0x6, 0x10001, 0x80000000, 0xffff, 0xff, 0x2, 0x100, 0x0, 0x0, 0xc3b2, 0x7, 0xd031, 0x4, 0x9, 0xfffffc01, 0x0, 0x9, 0x8bc7, 0x3, 0x20, 0x3, 0x3, 0x6, 0x9, 0x3, 0x3, 0x9, 0x4, 0xad, 0x3, 0x9, 0xc05, 0x5, 0x2, 0x8, 0x6, 0x10001, 0x9, 0x10000, 0x1, 0x40, 0x8000, 0x2, 0x9, 0x5, 0x7, 0x0, 0xe6, 0x5]}, ["", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x80}, 0x0)

14:04:38 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:04:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x3902)

14:04:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
openat(r1, &(0x7f0000000240)='./file0\x00', 0x4801, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r4)
name_to_handle_at(r4, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)=@xfs_parent={0x1c, 0x82, {0x3, 0x5, 0x1ff, 0x400}}, &(0x7f0000000180), 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:04:38 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3202.174151] loop3: detected capacity change from 0 to 40
14:04:38 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105042, 0x0)
openat(r0, &(0x7f0000000180)='./file1\x00', 0x50820, 0x68)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x40)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190000000000000005000000000000e24e4167329ede4ab145401e190000000000000000000000007f8c0000005386911778028f35ce9b9a3ce3f70ec9f74883768edb21b97c4e5ee39b45b9ab52227bff3ef719eeea6e55277e3ec6862580b3e08c82635ffe23fc99b580c1152a1ee640f0e1bc2a415fe7adb57f23a65837569889551a9e786ae511b27ded11d9533f19e598f5f07c230ba4b659a8e168db74f4ea63f9aeefa65f8cbdea151b116bf0defa39385e82dc6953b0b5978aa63b54352aae454b43467177b25fa7bb6373c1db2c84b96321"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000190001000000007a00000000000000000000000000000000000020007f8c000100000000000000000000090000000000007a50ac6c0000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a", @ANYRESDEC=r5, @ANYRES16=r0], 0xb8}}, 0x0)
getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000500)=""/199, &(0x7f00000000c0)=0xc7)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file1', [{}, {0x20, 'vfat\x00'}, {}, {0x20, '&{'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, '-'}, {0x20, 'vfat\x00'}, {0x20, '}$^^@).'}, {}], 0xa, "f02fe7eb70c478d03c8effab0408c3fcb96a2a0d418aa7261c88ecf3ccacfec52d43a742075f634cbccfb13bb91efa66d57bfa810fe28e6d20c1532078bf6c2b1150b9b4b2137cf652e5604d9f05392263bd7db698ed49ca6f9620ddeb2e96bb7856be9d72d81ca8a7eb8d84230faf8b4d8c4eaa1d648d2c9d7d258b303357801c7da21c1f4ece25a64984fa8e71a264718e14ea9415e471eddbe642266fe2d69839cca61bc2cf5c8e0c37fc21b5556c3cfc11ec56aa0b6f91a3484e9dd0048e1b8febd71dbf1c3510dca1a546798189bed881fd852f608aa7e4250bc03c6dced7639b46119e8a48be74a7a9"}, 0x11f)
syncfs(r6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000006c0)=@getsadinfo={0x418, 0x23, 0x1, 0x70bd2c, 0x25dfdbfd, 0x0, [@replay_esn_val={0x20, 0x17, {0x1, 0x3, 0x70bd2a, 0x70bd2c, 0x70bd2b, 0x4, [0x7c7]}}, @algo_auth_trunc={0x145, 0x14, {{'ghash-generic\x00'}, 0x7c8, 0x180, "ea53c6a54d61b9b3697e4acd67fb0431270177fb13d14cab638f857983a36987989e7d4645a2e1cf3179847cc8c9e16ccf889c627b5f40240627fc26ee4e13731b339a0eb87799ba210cdbbf8bc6abd5abe2101328ac8d48349051a6a03d2f5c3d672890e6ad39c4c756d54954b06b880ff0284d1671a0e8b1b101c501ac3d33d01cdd9273037ee07b943b06b8a8a5869694a5b9d6df17ce9bad645bbc5832807b049ea8daa687c2c77ec7e111d7260b02485bc9ceb52d9026339e69e12b56e5fd5191aec814576503f14dc8a3c30beb75d59673e85d889ce64a4806a50608128bf8bbd7e3f08c42c5719170a121368f5dbd71d7d731e41bcf"}}, @algo_auth={0xf6, 0x1, {{'michael_mic\x00'}, 0x570, "6a22668f0ec4fc0b7f8589973eb9e0c1933baa538c2202aba1ec4c29773d58b66e7595065234c45d409947def0b6a8686c225fb6088af83cd1dff7b2c380ac1054760a13e55f42aad094dda188298726748ec8931e53919df74df52cbe1607ccfc97a0008953f64641c5464138c2f50eaa9f67af6e4b927b7b1499792f90e72a5ea33d97e534db3f9aa6a49ff4ad6cbb8d03904f0d18f8f6183564ed71a19af1988ebcd0a8157be2e800bdf6b025"}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd27, 0xfffffff7}}, @algo_auth={0x67, 0x1, {{'sha256-avx2\x00'}, 0xf8, "2a3e629d9fcbeaebc0c80b53786c71e7a8c5e45cc82a3e74009d838f698354"}}, @algo_crypt={0x12a, 0x2, {{'ecb(arc4)-generic\x00'}, 0x710, "56875f2742a9f23bdfd879d95db3adc9e731acd27d2ce0eb27bb112e878dc2c6db2d3fe1e396e401232dea316ff24351c6886dc96ade7b9af66115e92166aeda6204de2baaddafe16b3ddd5d5a954ba6f5d9ed380f3fe4dfb03c448e1c4c5f88a744363161a6d3ba8bd123717a3a3416f5d806fa1c411a5d28c2482ecd7392b4d1d6fe5ad6c73fcae5a14a8ead28e6ad52501ac4f5ff91614310fcb7b2fa06b8f72659e26796cc93ee072087ef271249c7a6d21a03f4f5f0b41c7645d4a8a1e57c365eb07239a75e33df81bbb5744b91bba2c78c05fedf5a6509267def8a546dd378"}}]}, 0x418}, 0x1, 0x0, 0x0, 0x801}, 0x80000)
sendfile(r2, r1, 0x0, 0xfffffdef)

14:04:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51)

[ 3202.196725] loop4: detected capacity change from 0 to 40
[ 3202.197923] loop2: detected capacity change from 0 to 40
[ 3202.262098] FAULT_INJECTION: forcing a failure.
[ 3202.262098] name failslab, interval 1, probability 0, space 0, times 0
[ 3202.262955] CPU: 0 PID: 14390 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221207 #1
[ 3202.263513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3202.264070] Call Trace:
[ 3202.264256]  <TASK>
[ 3202.264420]  dump_stack_lvl+0x8f/0xb7
[ 3202.264708]  should_fail_ex.cold+0x5/0xa
[ 3202.265023]  should_failslab+0x9/0x20
[ 3202.265308]  __kmem_cache_alloc_node+0x5b/0x400
[ 3202.265641]  ? iter_file_splice_write+0x169/0xcb0
[ 3202.265992]  ? iter_file_splice_write+0x169/0xcb0
[ 3202.266335]  __kmalloc+0x46/0xc0
[ 3202.266590]  iter_file_splice_write+0x169/0xcb0
[ 3202.266922]  ? generic_file_read_iter+0x330/0x550
[ 3202.267283]  ? generic_file_splice_read+0x1bc/0x4d0
[ 3202.267636]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3202.268001]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 3202.268380]  ? inode_security+0x105/0x140
[ 3202.268691]  ? security_file_permission+0xb5/0xe0
[ 3202.269048]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3202.269416]  direct_splice_actor+0x113/0x180
[ 3202.269737]  splice_direct_to_actor+0x33a/0x8c0
[ 3202.270074]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3202.270434]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3202.270799]  ? security_file_permission+0xb5/0xe0
[ 3202.271150]  do_splice_direct+0x1bc/0x290
[ 3202.271453]  ? __pfx_do_splice_direct+0x10/0x10
[ 3202.271795]  ? lock_is_held_type+0xdb/0x130
[ 3202.272119]  do_sendfile+0xb1d/0x1280
[ 3202.272412]  ? __pfx_do_sendfile+0x10/0x10
[ 3202.272720]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 3202.273094]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 3202.273508]  __x64_sys_sendfile64+0x248/0x2a0
[ 3202.273831]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3202.274204]  ? rcu_read_lock_sched_held+0x42/0x80
[ 3202.274559]  do_syscall_64+0x3f/0x90
[ 3202.274838]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3202.275205] RIP: 0033:0x7f61b5a02b19
[ 3202.275485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3202.276694] RSP: 002b:00007f61b2f78188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3202.277245] RAX: ffffffffffffffda RBX: 00007f61b5b15f60 RCX: 00007f61b5a02b19
[ 3202.277748] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 3202.278257] RBP: 00007f61b2f781d0 R08: 0000000000000000 R09: 0000000000000000
[ 3202.278774] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 3202.279285] R13: 00007ffdbc84f80f R14: 00007f61b2f78300 R15: 0000000000022000
[ 3202.279818]  </TASK>
[ 3202.288690] loop5: detected capacity change from 0 to 40
14:04:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52)

[ 3202.319963] loop6: detected capacity change from 0 to 40
14:04:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

14:04:38 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:04:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x3f00)

[ 3202.588938] syz-executor.6: attempt to access beyond end of device
[ 3202.588938] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3202.590912] Buffer I/O error on dev loop6, logical block 10, lost async page write
14:04:38 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105042, 0x0)
openat(r0, &(0x7f0000000180)='./file1\x00', 0x50820, 0x68)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x40)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190000000000000005000000000000e24e4167329ede4ab145401e190000000000000000000000007f8c0000005386911778028f35ce9b9a3ce3f70ec9f74883768edb21b97c4e5ee39b45b9ab52227bff3ef719eeea6e55277e3ec6862580b3e08c82635ffe23fc99b580c1152a1ee640f0e1bc2a415fe7adb57f23a65837569889551a9e786ae511b27ded11d9533f19e598f5f07c230ba4b659a8e168db74f4ea63f9aeefa65f8cbdea151b116bf0defa39385e82dc6953b0b5978aa63b54352aae454b43467177b25fa7bb6373c1db2c84b96321"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000190001000000007a00000000000000000000000000000000000020007f8c000100000000000000000000090000000000007a50ac6c0000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a", @ANYRESDEC=r5, @ANYRES16=r0], 0xb8}}, 0x0)
getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000500)=""/199, &(0x7f00000000c0)=0xc7)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file1', [{}, {0x20, 'vfat\x00'}, {}, {0x20, '&{'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, '-'}, {0x20, 'vfat\x00'}, {0x20, '}$^^@).'}, {}], 0xa, "f02fe7eb70c478d03c8effab0408c3fcb96a2a0d418aa7261c88ecf3ccacfec52d43a742075f634cbccfb13bb91efa66d57bfa810fe28e6d20c1532078bf6c2b1150b9b4b2137cf652e5604d9f05392263bd7db698ed49ca6f9620ddeb2e96bb7856be9d72d81ca8a7eb8d84230faf8b4d8c4eaa1d648d2c9d7d258b303357801c7da21c1f4ece25a64984fa8e71a264718e14ea9415e471eddbe642266fe2d69839cca61bc2cf5c8e0c37fc21b5556c3cfc11ec56aa0b6f91a3484e9dd0048e1b8febd71dbf1c3510dca1a546798189bed881fd852f608aa7e4250bc03c6dced7639b46119e8a48be74a7a9"}, 0x11f)
syncfs(r6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3202.614757] loop4: detected capacity change from 0 to 40
[ 3202.615680] loop2: detected capacity change from 0 to 40
14:04:38 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r1)
accept$unix(r1, 0x0, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f00000000c0)='./file1\x00', 0x200002, 0x100)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r5)
sendfile(r3, r2, 0x0, 0xfffffdef)

[ 3202.675039] loop3: detected capacity change from 0 to 40
[ 3202.675774] FAULT_INJECTION: forcing a failure.
[ 3202.675774] name failslab, interval 1, probability 0, space 0, times 0
[ 3202.675805] CPU: 0 PID: 14405 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221207 #1
[ 3202.675825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3202.675835] Call Trace:
[ 3202.675840]  <TASK>
[ 3202.675848]  dump_stack_lvl+0x8f/0xb7
[ 3202.675876]  should_fail_ex.cold+0x5/0xa
[ 3202.675908]  should_failslab+0x9/0x20
[ 3202.675933]  __kmem_cache_alloc_node+0x5b/0x400
[ 3202.675956]  ? iter_file_splice_write+0x169/0xcb0
[ 3202.680127]  ? iter_file_splice_write+0x169/0xcb0
[ 3202.680471]  __kmalloc+0x46/0xc0
[ 3202.680728]  iter_file_splice_write+0x169/0xcb0
[ 3202.681083]  ? generic_file_read_iter+0x330/0x550
[ 3202.681440]  ? generic_file_splice_read+0x1bc/0x4d0
[ 3202.681791]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3202.682155]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 3202.682533]  ? inode_security+0x105/0x140
[ 3202.682846]  ? security_file_permission+0xb5/0xe0
[ 3202.683199]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3202.683565]  direct_splice_actor+0x113/0x180
[ 3202.683880]  splice_direct_to_actor+0x33a/0x8c0
[ 3202.684217]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3202.684568]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3202.684937]  ? security_file_permission+0xb5/0xe0
[ 3202.685289]  do_splice_direct+0x1bc/0x290
[ 3202.685615]  ? __pfx_do_splice_direct+0x10/0x10
[ 3202.685974]  ? lock_is_held_type+0xdb/0x130
[ 3202.686327]  do_sendfile+0xb1d/0x1280
[ 3202.686634]  ? __pfx_do_sendfile+0x10/0x10
[ 3202.686955]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 3202.687336]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 3202.687755]  __x64_sys_sendfile64+0x248/0x2a0
[ 3202.688111]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3202.688492]  ? rcu_read_lock_sched_held+0x42/0x80
[ 3202.688845]  do_syscall_64+0x3f/0x90
[ 3202.689147]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3202.689530] RIP: 0033:0x7f61b5a02b19
[ 3202.689813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3202.691098] RSP: 002b:00007f61b2f78188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3202.691645] RAX: ffffffffffffffda RBX: 00007f61b5b15f60 RCX: 00007f61b5a02b19
[ 3202.692156] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 3202.692679] RBP: 00007f61b2f781d0 R08: 0000000000000000 R09: 0000000000000000
[ 3202.693208] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 3202.693721] R13: 00007ffdbc84f80f R14: 00007f61b2f78300 R15: 0000000000022000
[ 3202.694247]  </TASK>
14:04:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53)

[ 3202.772055] loop5: detected capacity change from 0 to 40
14:04:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3202.873865] loop6: detected capacity change from 0 to 40
[ 3202.916300] FAULT_INJECTION: forcing a failure.
[ 3202.916300] name failslab, interval 1, probability 0, space 0, times 0
[ 3202.918504] CPU: 1 PID: 14422 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221207 #1
[ 3202.919692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3202.920883] Call Trace:
[ 3202.921318]  <TASK>
[ 3202.921650]  dump_stack_lvl+0x8f/0xb7
[ 3202.922256]  should_fail_ex.cold+0x5/0xa
[ 3202.922904]  ? jbd2__journal_start+0x194/0x8d0
[ 3202.923612]  should_failslab+0x9/0x20
[ 3202.924204]  kmem_cache_alloc+0x5a/0x410
[ 3202.924827]  ? lock_is_held_type+0xdb/0x130
[ 3202.925513]  jbd2__journal_start+0x194/0x8d0
[ 3202.926193]  __ext4_journal_start_sb+0x4a5/0x6b0
[ 3202.926815]  ? ext4_dirty_inode+0xa5/0x130
[ 3202.927387]  ? __pfx_ext4_dirty_inode+0x10/0x10
[ 3202.928124]  ext4_dirty_inode+0xa5/0x130
[ 3202.928742]  __mark_inode_dirty+0x1aa/0xe70
[ 3202.929422]  generic_update_time+0x21b/0x2b0
[ 3202.930125]  file_modified_flags+0x2d4/0x330
[ 3202.930810]  ? __pfx_file_modified_flags+0x10/0x10
[ 3202.931551]  ? __pfx_down_write+0x10/0x10
[ 3202.932199]  ext4_buffered_write_iter+0xf9/0x460
[ 3202.932854]  ? stack_trace_save+0x90/0xd0
[ 3202.933414]  ext4_file_write_iter+0x3ff/0x1930
[ 3202.934067]  ? iter_file_splice_write+0x169/0xcb0
[ 3202.934702]  ? kasan_save_stack+0x35/0x50
[ 3202.935273]  ? kasan_save_stack+0x22/0x50
[ 3202.935828]  ? kasan_set_track+0x25/0x30
[ 3202.936386]  ? __kasan_kmalloc+0x82/0x90
[ 3202.936947]  ? __kmalloc+0x56/0xc0
[ 3202.937441]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 3202.938102]  ? do_splice_direct+0x1bc/0x290
[ 3202.938676]  ? do_sendfile+0xb1d/0x1280
[ 3202.939209]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 3202.939852]  ? lock_is_held_type+0xdb/0x130
[ 3202.940451]  do_iter_readv_writev+0x211/0x3c0
[ 3202.941086]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3202.941745]  ? avc_policy_seqno+0xd/0x70
[ 3202.942317]  ? security_file_permission+0xb5/0xe0
[ 3202.942967]  do_iter_write+0x18b/0x700
[ 3202.943515]  ? lock_is_held_type+0xdb/0x130
[ 3202.944107]  vfs_iter_write+0x74/0xb0
[ 3202.944644]  iter_file_splice_write+0x73e/0xcb0
[ 3202.945303]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3202.945994]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 3202.946702]  ? security_file_permission+0xb5/0xe0
[ 3202.947368]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3202.948049]  direct_splice_actor+0x113/0x180
[ 3202.948653]  splice_direct_to_actor+0x33a/0x8c0
[ 3202.949277]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3202.949958]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3202.950624]  ? security_file_permission+0xb5/0xe0
[ 3202.951297]  do_splice_direct+0x1bc/0x290
[ 3202.951846]  ? __pfx_do_splice_direct+0x10/0x10
[ 3202.952490]  ? lock_is_held_type+0xdb/0x130
[ 3202.953094]  do_sendfile+0xb1d/0x1280
[ 3202.953649]  ? __pfx_do_sendfile+0x10/0x10
[ 3202.954220]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 3202.954903]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 3202.955639]  __x64_sys_sendfile64+0x248/0x2a0
[ 3202.956255]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3202.956941]  ? rcu_read_lock_sched_held+0x42/0x80
[ 3202.957616]  do_syscall_64+0x3f/0x90
[ 3202.958121]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3202.958805] RIP: 0033:0x7f61b5a02b19
[ 3202.959297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3202.961613] RSP: 002b:00007f61b2f57188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3202.962603] RAX: ffffffffffffffda RBX: 00007f61b5b16020 RCX: 00007f61b5a02b19
[ 3202.963529] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 3202.964451] RBP: 00007f61b2f571d0 R08: 0000000000000000 R09: 0000000000000000
[ 3202.965361] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 3202.966293] R13: 00007ffdbc84f80f R14: 00007f61b2f57300 R15: 0000000000022000
[ 3202.967249]  </TASK>
[ 3202.972802] loop4: detected capacity change from 0 to 40
[ 3203.112585] syz-executor.6: attempt to access beyond end of device
[ 3203.112585] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3203.113482] Buffer I/O error on dev loop6, logical block 10, lost async page write
14:04:57 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_open_dev$vcsu(&(0x7f00000004c0), 0x7fff, 0x40000)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000800000000000000a250d79fb808c0000000000008b9dfa5035b7e64703719ab743e41820a75a69cc8fb749e3c994b5d725e04bdc9090a39b407b91ff8c227266b35a581abf1de97bcd7fcfe6ceebef1f8e5983a17ecad01726afbc133b52cc09d68ed9a4e4b6e81b5d068488"], 0xb8}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0xff, r4, &(0x7f00000002c0)="c430991fe4e88d508d306f8fc95715505a97a8a7225452a58d5a6306cfcc33a8b0a046837aa4d639a33aa04f3dace1aa5c46a0aba44a2c217b5733951d8c08a131b4497cbfb2770d81599ce30caa7a6d12a4ecb38f5dff01436da2c10a23d6726438ea2bfdec5cbf625b3d2abe0c042096fa1321679a2f2c6722f00bc0547dc30483ec8285589cd72469e9d38003f9528bbaeb78f69352fa1db769691a8cf5372445039982d99fac4f32405ccda97c2620844f8dad53cdcec6a62b11fd0ad39a07f35363dbc3fc45feb0c3b69bbb476eeab9c89b5cbe78ae556ab9fc747d9b2a44f049", 0xe3, 0x6, 0x0, 0x2, r2}])
r5 = openat(r0, &(0x7f0000000240)='./file2\x00', 0x101b40, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0x5}}, './file1\x00'})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r7)
sendfile(r2, r1, 0x0, 0xfffffdef)

14:04:57 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105042, 0x0)
openat(r0, &(0x7f0000000180)='./file1\x00', 0x50820, 0x68)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x40)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190000000000000005000000000000e24e4167329ede4ab145401e190000000000000000000000007f8c0000005386911778028f35ce9b9a3ce3f70ec9f74883768edb21b97c4e5ee39b45b9ab52227bff3ef719eeea6e55277e3ec6862580b3e08c82635ffe23fc99b580c1152a1ee640f0e1bc2a415fe7adb57f23a65837569889551a9e786ae511b27ded11d9533f19e598f5f07c230ba4b659a8e168db74f4ea63f9aeefa65f8cbdea151b116bf0defa39385e82dc6953b0b5978aa63b54352aae454b43467177b25fa7bb6373c1db2c84b96321"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000190001000000007a00000000000000000000000000000000000020007f8c000100000000000000000000090000000000007a50ac6c0000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a", @ANYRESDEC=r5, @ANYRES16=r0], 0xb8}}, 0x0)
getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000500)=""/199, &(0x7f00000000c0)=0xc7)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file1', [{}, {0x20, 'vfat\x00'}, {}, {0x20, '&{'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, '-'}, {0x20, 'vfat\x00'}, {0x20, '}$^^@).'}, {}], 0xa, "f02fe7eb70c478d03c8effab0408c3fcb96a2a0d418aa7261c88ecf3ccacfec52d43a742075f634cbccfb13bb91efa66d57bfa810fe28e6d20c1532078bf6c2b1150b9b4b2137cf652e5604d9f05392263bd7db698ed49ca6f9620ddeb2e96bb7856be9d72d81ca8a7eb8d84230faf8b4d8c4eaa1d648d2c9d7d258b303357801c7da21c1f4ece25a64984fa8e71a264718e14ea9415e471eddbe642266fe2d69839cca61bc2cf5c8e0c37fc21b5556c3cfc11ec56aa0b6f91a3484e9dd0048e1b8febd71dbf1c3510dca1a546798189bed881fd852f608aa7e4250bc03c6dced7639b46119e8a48be74a7a9"}, 0x11f)
syncfs(r6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendfile(r2, r1, 0x0, 0xfffffdef)

14:04:57 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a000000000800000001000000009e6c6553000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
fcntl$notify(r4, 0x402, 0x22)

14:04:57 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140ec0001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:04:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:04:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x3f01)

14:04:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

14:04:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3221.517891] loop2: detected capacity change from 0 to 40
[ 3221.519036] loop3: detected capacity change from 0 to 40
[ 3221.541410] loop6: detected capacity change from 0 to 40
[ 3221.543156] loop5: detected capacity change from 0 to 40
[ 3221.553861] syz-executor.2: attempt to access beyond end of device
[ 3221.553861] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3221.554741] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3221.582426] loop4: detected capacity change from 0 to 40
14:04:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x6a02)

[ 3221.730094] syz-executor.6: attempt to access beyond end of device
[ 3221.730094] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3221.731852] Buffer I/O error on dev loop6, logical block 10, lost async page write
14:04:57 executing program 2:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x0)
syncfs(r3)
ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000180)=""/124)

14:04:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:04:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3221.874801] loop3: detected capacity change from 0 to 40
[ 3221.936278] loop5: detected capacity change from 0 to 40
14:04:58 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105042, 0x0)
openat(r0, &(0x7f0000000180)='./file1\x00', 0x50820, 0x68)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x40)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190000000000000005000000000000e24e4167329ede4ab145401e190000000000000000000000007f8c0000005386911778028f35ce9b9a3ce3f70ec9f74883768edb21b97c4e5ee39b45b9ab52227bff3ef719eeea6e55277e3ec6862580b3e08c82635ffe23fc99b580c1152a1ee640f0e1bc2a415fe7adb57f23a65837569889551a9e786ae511b27ded11d9533f19e598f5f07c230ba4b659a8e168db74f4ea63f9aeefa65f8cbdea151b116bf0defa39385e82dc6953b0b5978aa63b54352aae454b43467177b25fa7bb6373c1db2c84b96321"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000190001000000007a00000000000000000000000000000000000020007f8c000100000000000000000000090000000000007a50ac6c0000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a", @ANYRESDEC=r5, @ANYRES16=r0], 0xb8}}, 0x0)
getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000500)=""/199, &(0x7f00000000c0)=0xc7)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file1', [{}, {0x20, 'vfat\x00'}, {}, {0x20, '&{'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, '-'}, {0x20, 'vfat\x00'}, {0x20, '}$^^@).'}, {}], 0xa, "f02fe7eb70c478d03c8effab0408c3fcb96a2a0d418aa7261c88ecf3ccacfec52d43a742075f634cbccfb13bb91efa66d57bfa810fe28e6d20c1532078bf6c2b1150b9b4b2137cf652e5604d9f05392263bd7db698ed49ca6f9620ddeb2e96bb7856be9d72d81ca8a7eb8d84230faf8b4d8c4eaa1d648d2c9d7d258b303357801c7da21c1f4ece25a64984fa8e71a264718e14ea9415e471eddbe642266fe2d69839cca61bc2cf5c8e0c37fc21b5556c3cfc11ec56aa0b6f91a3484e9dd0048e1b8febd71dbf1c3510dca1a546798189bed881fd852f608aa7e4250bc03c6dced7639b46119e8a48be74a7a9"}, 0x11f)
syncfs(r6)
sendfile(r2, r1, 0x0, 0xfffffdef)

14:04:58 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a", @ANYRES64=r0, @ANYRESDEC=r0], 0xb8}}, 0x200c0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000180)={0x20, 0x6, 0x8})
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r6)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="3010c44f02000000a60000002e2f66696c65304d183f73e19078497ee3abdd40f1a0f771c54ccd6469e6839b86bb039831865cfc549548d1e0ff9fc5bcbcc1e48771625c4e047b132d978626eed2148934881801930e1bc040ffff7f4a3e627cbb2134f288154c88ad"])
sendfile(r2, r1, 0x0, 0xfffffdef)

14:04:58 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:04:58 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x8004)

14:04:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3222.246807] loop6: detected capacity change from 0 to 40
[ 3222.263208] FAT-fs (loop6): Unrecognized mount option "00000000000000000003" or missing value
[ 3222.429689] loop5: detected capacity change from 0 to 40
[ 3222.467045] loop3: detected capacity change from 0 to 40
[ 3223.069756] loop6: detected capacity change from 0 to 40
[ 3223.072088] FAT-fs (loop6): Unrecognized mount option "00000000000000000003" or missing value
14:05:16 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400f0001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb0800e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000090000000000df63a36fd407eb99643bb3409a86448396cd1499fc902c822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000019700275f", @ANYRES16, @ANYBLOB], 0x50}}, 0x885)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x1}, 0xc)

14:05:16 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105042, 0x0)
openat(r0, &(0x7f0000000180)='./file1\x00', 0x50820, 0x68)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x40)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190000000000000005000000000000e24e4167329ede4ab145401e190000000000000000000000007f8c0000005386911778028f35ce9b9a3ce3f70ec9f74883768edb21b97c4e5ee39b45b9ab52227bff3ef719eeea6e55277e3ec6862580b3e08c82635ffe23fc99b580c1152a1ee640f0e1bc2a415fe7adb57f23a65837569889551a9e786ae511b27ded11d9533f19e598f5f07c230ba4b659a8e168db74f4ea63f9aeefa65f8cbdea151b116bf0defa39385e82dc6953b0b5978aa63b54352aae454b43467177b25fa7bb6373c1db2c84b96321"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000190001000000007a00000000000000000000000000000000000020007f8c000100000000000000000000090000000000007a50ac6c0000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a", @ANYRESDEC=r5, @ANYRES16=r0], 0xb8}}, 0x0)
getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000500)=""/199, &(0x7f00000000c0)=0xc7)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file1', [{}, {0x20, 'vfat\x00'}, {}, {0x20, '&{'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, '-'}, {0x20, 'vfat\x00'}, {0x20, '}$^^@).'}, {}], 0xa, "f02fe7eb70c478d03c8effab0408c3fcb96a2a0d418aa7261c88ecf3ccacfec52d43a742075f634cbccfb13bb91efa66d57bfa810fe28e6d20c1532078bf6c2b1150b9b4b2137cf652e5604d9f05392263bd7db698ed49ca6f9620ddeb2e96bb7856be9d72d81ca8a7eb8d84230faf8b4d8c4eaa1d648d2c9d7d258b303357801c7da21c1f4ece25a64984fa8e71a264718e14ea9415e471eddbe642266fe2d69839cca61bc2cf5c8e0c37fc21b5556c3cfc11ec56aa0b6f91a3484e9dd0048e1b8febd71dbf1c3510dca1a546798189bed881fd852f608aa7e4250bc03c6dced7639b46119e8a48be74a7a9"}, 0x11f)
sendfile(r2, r1, 0x0, 0xfffffdef)

14:05:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x2)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r4=>r2, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r0, {0x921d}}, './file1\x00'})
sendfile(r4, r5, 0x0, 0x6)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:05:16 executing program 2:
syz_io_uring_setup(0x696c, &(0x7f0000000180)={0x0, 0xcb36, 0x8, 0x0, 0x17c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000000c0))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80, 0x42)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x124e1, 0x113)
syncfs(r2)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:05:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0xf000)

14:05:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000023002b28fef8071f00082abd7000fedbdf08001f00", @ANYRES32=0x0, @ANYBLOB="08001f00", @ANYRES32=0x0, @ANYBLOB="08001e00ff070000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x22000000)

14:05:16 executing program 3:
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:05:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3240.461891] loop6: detected capacity change from 0 to 40
[ 3240.526001] loop5: detected capacity change from 0 to 40
[ 3240.567944] syz-executor.6: attempt to access beyond end of device
[ 3240.567944] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3240.569757] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3240.616875] loop2: detected capacity change from 0 to 40
14:05:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x28)

[ 3240.683826] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3240.758476] syz-executor.2: attempt to access beyond end of device
[ 3240.758476] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3240.760215] Buffer I/O error on dev loop2, logical block 10, lost async page write
14:05:16 executing program 3:
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), 0x4020, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@common=@version_9p2000}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, ')^'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x71, 0x66, 0x62, 0x61, 0x61, 0x39, 0x34, 0x37], 0x2d, [0x65, 0x66, 0x62, 0x37], 0x2d, [0x61, 0x62, 0x30, 0x34], 0x2d, [0x569fba52a02a6858, 0x66, 0x62, 0x32], 0x2d, [0x34, 0x65, 0x37, 0x34, 0x62, 0x39, 0x64, 0x35]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x61, 0x37, 0x29, 0x34, 0x66, 0x35], 0x2d, [0x39, 0x39, 0x64], 0x2d, [0x39, 0x34, 0x32, 0xfa], 0x2d, [0x35, 0x62, 0x66, 0x36], 0x2d, [0x33, 0x33, 0x37, 0x61, 0x35, 0x0, 0x36, 0x62]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@audit}, {@appraise}]}})

14:05:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190007000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syncfs(r3)
sendfile(r1, r0, 0x0, 0xfffffdef)

14:05:16 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105042, 0x0)
openat(r0, &(0x7f0000000180)='./file1\x00', 0x50820, 0x68)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x40)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190000000000000005000000000000e24e4167329ede4ab145401e190000000000000000000000007f8c0000005386911778028f35ce9b9a3ce3f70ec9f74883768edb21b97c4e5ee39b45b9ab52227bff3ef719eeea6e55277e3ec6862580b3e08c82635ffe23fc99b580c1152a1ee640f0e1bc2a415fe7adb57f23a65837569889551a9e786ae511b27ded11d9533f19e598f5f07c230ba4b659a8e168db74f4ea63f9aeefa65f8cbdea151b116bf0defa39385e82dc6953b0b5978aa63b54352aae454b43467177b25fa7bb6373c1db2c84b96321"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000190001000000007a00000000000000000000000000000000000020007f8c000100000000000000000000090000000000007a50ac6c0000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000007a00000000000000000000000000000000000000007f8c000100000000000000000000000000000000000000000a", @ANYRESDEC=r5, @ANYRES16=r0], 0xb8}}, 0x0)
getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000500)=""/199, &(0x7f00000000c0)=0xc7)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

14:05:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x80000)

[ 3240.850995] FAT-fs (loop4): bogus number of reserved sectors
[ 3240.852004] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 3240.973159] loop5: detected capacity change from 0 to 40
[ 3241.073020] loop6: detected capacity change from 0 to 40
[ 3241.186953] syz-executor.6: attempt to access beyond end of device
[ 3241.186953] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3241.188771] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3241.355960] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3241.861298] ==================================================================
[ 3241.861826] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70
[ 3241.862272] Read of size 8 at addr ffff888044734a38 by task syz-executor/14528
[ 3241.862755] 
[ 3241.862877] CPU: 1 PID: 14528 Comm: syz-executor Not tainted 6.1.0-rc8-next-20221207 #1
[ 3241.863424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3241.863982] Call Trace:
[ 3241.864165]  <TASK>
[ 3241.864325]  dump_stack_lvl+0x8f/0xb7
[ 3241.864597]  print_report+0x175/0x478
[ 3241.864874]  ? __lock_acquire+0x42c9/0x5e70
[ 3241.865185]  kasan_report+0xbf/0x1c0
[ 3241.865476]  ? __lock_acquire+0x42c9/0x5e70
[ 3241.865780]  __lock_acquire+0x42c9/0x5e70
[ 3241.866088]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 3241.866415]  ? finish_task_switch.isra.0+0x22d/0x8a0
[ 3241.866762]  ? __pfx___lock_acquire+0x10/0x10
[ 3241.867098]  ? __switch_to+0x5c3/0xee0
[ 3241.867387]  lock_acquire+0x1a6/0x530
[ 3241.867656]  ? kmemleak_scan+0x1a0/0x1600
[ 3241.867964]  ? __pfx_lock_acquire+0x10/0x10
[ 3241.868270]  ? rcu_read_lock_sched_held+0x42/0x80
[ 3241.868607]  ? trace_rcu_dyntick+0x1a7/0x250
[ 3241.868927]  ? ct_nmi_exit+0x11d/0x1c0
[ 3241.869207]  _raw_spin_lock_irq+0x36/0x50
[ 3241.869512]  ? kmemleak_scan+0x1a0/0x1600
[ 3241.869805]  kmemleak_scan+0x1a0/0x1600
[ 3241.870098]  ? __pfx_kmemleak_scan+0x10/0x10
[ 3241.870419]  ? strncpy_from_user+0x107/0x500
[ 3241.870732]  kmemleak_write+0x574/0x680
[ 3241.871040]  ? __pfx_kmemleak_write+0x10/0x10
[ 3241.871362]  ? debugfs_file_get+0x1d2/0x450
[ 3241.871665]  ? __pfx_debugfs_file_get+0x10/0x10
[ 3241.872007]  full_proxy_write+0x121/0x190
[ 3241.872301]  vfs_write+0x358/0xe40
[ 3241.872561]  ? __pfx_full_proxy_write+0x10/0x10
[ 3241.872890]  ? __pfx_vfs_write+0x10/0x10
[ 3241.873512]  ? lock_release+0x3b6/0x750
[ 3241.874424]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 3241.875511]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 3241.876729]  ? __fget_light+0x212/0x280
[ 3241.877717]  ksys_write+0x12b/0x260
[ 3241.878043]  ? __pfx_ksys_write+0x10/0x10
[ 3241.878434]  ? rcu_read_lock_sched_held+0x42/0x80
[ 3241.878881]  do_syscall_64+0x3f/0x90
[ 3241.879239]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3241.879700] RIP: 0033:0x7f698ad2a5c3
[ 3241.880060] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18
[ 3241.881623] RSP: 002b:00007ffe7d603b08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3241.882291] RAX: ffffffffffffffda RBX: 00007ffe7d604148 RCX: 00007f698ad2a5c3
[ 3241.882908] RDX: 0000000000000004 RSI: 00007f698ade0ed9 RDI: 0000000000000003
[ 3241.883534] RBP: 0000000000000002 R08: 0000000000000ca9 R09: 00007ffe7d6c8080
[ 3241.884181] R10: 00007ffe7d6c8090 R11: 0000000000000246 R12: 00000000fffffff6
[ 3241.884799] R13: 00007ffe7d604ef1 R14: 0000000000000000 R15: 0000000000317579
[ 3241.885454]  </TASK>
[ 3241.885672] 
[ 3241.885831] Allocated by task 101:
[ 3241.886077]  kasan_save_stack+0x22/0x50
[ 3241.886338]  kasan_set_track+0x25/0x30
[ 3241.886595]  __kasan_slab_alloc+0x5c/0x70
[ 3241.886870]  kmem_cache_alloc+0x1e1/0x410
[ 3241.887151]  __create_object+0x3d/0xc10
[ 3241.887414]  kmem_cache_alloc+0x273/0x410
[ 3241.887683]  __alloc_file+0x21/0x240
[ 3241.887929]  alloc_empty_file+0x71/0x170
[ 3241.888202]  path_openat+0xd4/0x29b0
[ 3241.888455]  do_filp_open+0x1ba/0x410
[ 3241.888708]  do_sys_openat2+0x171/0x4c0
[ 3241.888981]  __x64_sys_openat+0x143/0x200
[ 3241.889254]  do_syscall_64+0x3f/0x90
[ 3241.889508]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3241.889835] 
[ 3241.889971] Freed by task 13:
[ 3241.890188]  kasan_save_stack+0x22/0x50
[ 3241.890462]  kasan_set_track+0x25/0x30
[ 3241.890738]  kasan_save_free_info+0x2e/0x50
[ 3241.891038]  __kasan_slab_free+0x10a/0x190
[ 3241.891329]  kmem_cache_free+0xfb/0x610
[ 3241.891601]  rcu_core+0x7e2/0x2090
[ 3241.891853]  __do_softirq+0x1c7/0x8f9
[ 3241.892150] 
[ 3241.892275] Last potentially related work creation:
[ 3241.892599]  kasan_save_stack+0x22/0x50
[ 3241.892877]  __kasan_record_aux_stack+0x95/0xb0
[ 3241.893287]  __call_rcu_common.constprop.0+0x6a/0xa40
[ 3241.893641]  kmem_cache_free+0xc1/0x610
[ 3241.893902]  rcu_core+0x7e2/0x2090
[ 3241.894143]  __do_softirq+0x1c7/0x8f9
[ 3241.894401] 
[ 3241.894523] Second to last potentially related work creation:
[ 3241.894904]  kasan_save_stack+0x22/0x50
[ 3241.895179]  __kasan_record_aux_stack+0x95/0xb0
[ 3241.895506]  __call_rcu_common.constprop.0+0x6a/0xa40
[ 3241.895861]  kmem_cache_free+0xc1/0x610
[ 3241.896133]  kfree_skbmem+0xef/0x1b0
[ 3241.896397]  kfree_skb_reason+0x147/0x3e0
[ 3241.896688]  ieee80211_iface_work+0x353/0xcc0
[ 3241.897009]  process_one_work+0xa17/0x16a0
[ 3241.897308]  worker_thread+0x63b/0x1260
[ 3241.897598]  kthread+0x2f1/0x3a0
[ 3241.897839]  ret_from_fork+0x2c/0x50
[ 3241.898103] 
[ 3241.898222] The buggy address belongs to the object at ffff888044734a20
[ 3241.898222]  which belongs to the cache kmemleak_object of size 368
[ 3241.899028] The buggy address is located 24 bytes inside of
[ 3241.899028]  368-byte region [ffff888044734a20, ffff888044734b90)
[ 3241.899792] 
[ 3241.899920] The buggy address belongs to the physical page:
[ 3241.900319] page:000000005f0bc7d8 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44734
[ 3241.900985] head:000000005f0bc7d8 order:1 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0
[ 3241.901647] flags: 0x100000000010200(slab|head|node=0|zone=1)
[ 3241.902078] raw: 0100000000010200 ffff88800844f780 dead000000000100 dead000000000122
[ 3241.902646] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000
[ 3241.903196] page dumped because: kasan: bad access detected
[ 3241.903597] 
[ 3241.903730] Memory state around the buggy address:
[ 3241.904086]  ffff888044734900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3241.904595]  ffff888044734980: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 3241.905112] >ffff888044734a00: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb
[ 3241.905633]                                         ^
[ 3241.906010]  ffff888044734a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3241.906532]  ffff888044734b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3241.907061] ==================================================================
[ 3241.907575] Disabling lock debugging due to kernel taint

VM DIAGNOSIS:
14:05:18  Registers:
info registers vcpu 0
RAX=0000000000000003 RBX=ffffffff85d7e4f0 RCX=ffffffff8138571f RDX=0000000000000000
RSI=ffffffff8608dad2 RDI=ffffffff85d7e4cc RBP=ffffffff85d7e4cc RSP=ffff888047fd7aa8
R8 =ffffffff8608dad2 R9 =ffffffff8604172c R10=ffffed1008ffaf7b R11=0000000000038001
R12=ffffffff85d7e514 R13=ffffffff85d7e4cc R14=ffffffff85d7e4cc R15=dffffc0000000000
RIP=ffffffff8112d55c RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f7bf85318c0 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe297f71f000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe297f71d000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7bf7bf5344 CR3=0000000044a2e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000696c61766e49002f XMM01=000000696e656420737365636341002f
XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffffffffffff0000ffffffff0000ff00
XMM06=000000000000474c000000006801000a XMM07=00000000000000000000000000000000
XMM08=49006d756e203c2069000a313a56000a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82489835 RDI=ffffffff87fb5b60 RBP=ffffffff87fb5b20 RSP=ffff88804728f1e8
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000078 R11=0000000000000001
R12=0000000000000078 R13=ffffffff87fb5b20 R14=0000000000000010 R15=ffffffff82489820
RIP=ffffffff8248988d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555574a8400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe03c457a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe03c4578000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055aac0061118 CR3=000000003effa000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000c005cf68400000000000ea8a40 XMM01=fdc2a8a9325a021e96eb958092c23bc5
XMM02=6a047663974e71424837e296dcf11201 XMM03=6d23dc6170735a315660cee7c35f8756
XMM04=000000000000000000000000ffe10000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=39f58543e60000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=9d0409336960e2744c4a1c88b8582d3b
XMM14=0f8c05dcf4f74582f8ca12df099ab639 XMM15=5e5e077d3f4163f64f1317e7fb5a29b2