[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 6)

21:45:26 executing program 7:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:45:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22)

21:45:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21)

21:45:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:45:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:45:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2725.775230] loop5: detected capacity change from 0 to 40
[ 2725.781011] loop4: detected capacity change from 0 to 40
[ 2725.790976] loop6: detected capacity change from 0 to 40
[ 2725.859184] loop0: detected capacity change from 0 to 40
[ 2725.861993] loop2: detected capacity change from 0 to 40
[ 2725.867415] loop3: detected capacity change from 0 to 40
[ 2725.871485] loop1: detected capacity change from 0 to 40
[ 2726.031735] FAULT_INJECTION: forcing a failure.
[ 2726.031735] name failslab, interval 1, probability 0, space 0, times 0
[ 2726.033572] CPU: 0 PID: 11479 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2726.034727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2726.035859] Call Trace:
[ 2726.036234]  <TASK>
[ 2726.036569]  dump_stack_lvl+0x8f/0xb7
[ 2726.037116]  should_fail_ex.cold+0x5/0xa
[ 2726.037702]  should_failslab+0x9/0x20
[ 2726.038258]  __kmem_cache_alloc_node+0x5b/0x400
[ 2726.039021]  ? iter_file_splice_write+0x169/0xcb0
[ 2726.039727]  ? iter_file_splice_write+0x169/0xcb0
[ 2726.040422]  __kmalloc+0x46/0xc0
[ 2726.040944]  iter_file_splice_write+0x169/0xcb0
[ 2726.041610]  ? generic_file_read_iter+0x330/0x550
[ 2726.042336]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2726.043072]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2726.043810]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2726.044536]  ? inode_security+0x105/0x140
[ 2726.045147]  ? security_file_permission+0xb5/0xe0
[ 2726.045827]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2726.046544]  direct_splice_actor+0x113/0x180
[ 2726.047170]  splice_direct_to_actor+0x33a/0x8c0
[ 2726.047816]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2726.048503]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2726.049231]  ? security_file_permission+0xb5/0xe0
[ 2726.049875]  do_splice_direct+0x1bc/0x290
[ 2726.050457]  ? __pfx_do_splice_direct+0x10/0x10
[ 2726.051123]  ? lock_is_held_type+0xdb/0x130
[ 2726.051744]  do_sendfile+0xb1d/0x1280
[ 2726.052318]  ? __pfx_do_sendfile+0x10/0x10
[ 2726.052943]  __x64_sys_sendfile64+0x248/0x2a0
[ 2726.053566]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2726.054256]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2726.054978]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2726.055702]  do_syscall_64+0x3f/0x90
[ 2726.056194]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2726.056904] RIP: 0033:0x7fcad440bb19
[ 2726.057423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2726.059805] RSP: 002b:00007fcad1981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2726.060831] RAX: ffffffffffffffda RBX: 00007fcad451ef60 RCX: 00007fcad440bb19
[ 2726.061786] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2726.062738] RBP: 00007fcad19811d0 R08: 0000000000000000 R09: 0000000000000000
[ 2726.063686] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2726.064645] R13: 00007ffcb7d7eb4f R14: 00007fcad1981300 R15: 0000000000022000
[ 2726.065625]  </TASK>
[ 2726.099657] FAULT_INJECTION: forcing a failure.
[ 2726.099657] name failslab, interval 1, probability 0, space 0, times 0
[ 2726.101557] CPU: 1 PID: 11480 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2726.102783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2726.103769] syz-executor.5: attempt to access beyond end of device
[ 2726.103769] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.103955] Call Trace:
[ 2726.103967]  <TASK>
[ 2726.105785] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2726.105828]  dump_stack_lvl+0x8f/0xb7
[ 2726.107806]  should_fail_ex.cold+0x5/0xa
[ 2726.108449]  should_failslab+0x9/0x20
[ 2726.109045]  __kmem_cache_alloc_node+0x5b/0x400
[ 2726.109749]  ? iter_file_splice_write+0x169/0xcb0
[ 2726.110492]  ? iter_file_splice_write+0x169/0xcb0
[ 2726.111229]  __kmalloc+0x46/0xc0
[ 2726.111769]  iter_file_splice_write+0x169/0xcb0
[ 2726.112467]  ? generic_file_read_iter+0x330/0x550
[ 2726.113224]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2726.113980]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2726.114781]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2726.115571]  ? inode_security+0x105/0x140
[ 2726.116230]  ? security_file_permission+0xb5/0xe0
[ 2726.116974]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2726.117750]  direct_splice_actor+0x113/0x180
[ 2726.118422]  splice_direct_to_actor+0x33a/0x8c0
[ 2726.119130]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2726.119880]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2726.120644]  ? security_file_permission+0xb5/0xe0
[ 2726.121384]  do_splice_direct+0x1bc/0x290
[ 2726.122015]  ? __pfx_do_splice_direct+0x10/0x10
[ 2726.122754]  ? lock_is_held_type+0xdb/0x130
[ 2726.123441]  do_sendfile+0xb1d/0x1280
[ 2726.124060]  ? __pfx_do_sendfile+0x10/0x10
[ 2726.124739]  __x64_sys_sendfile64+0x248/0x2a0
[ 2726.125422]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2726.126163]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2726.126934]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2726.127709]  do_syscall_64+0x3f/0x90
[ 2726.128282]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2726.129056] RIP: 0033:0x7fd263e4bb19
[ 2726.129611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2726.132198] RSP: 002b:00007fd2613c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2726.133281] RAX: ffffffffffffffda RBX: 00007fd263f5ef60 RCX: 00007fd263e4bb19
[ 2726.134294] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2726.135314] RBP: 00007fd2613c11d0 R08: 0000000000000000 R09: 0000000000000000
[ 2726.136307] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2726.137311] R13: 00007ffc9718118f R14: 00007fd2613c1300 R15: 0000000000022000
[ 2726.138356]  </TASK>
21:45:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22)

21:45:27 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2726.281927] syz-executor.4: attempt to access beyond end of device
[ 2726.281927] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.284695] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2726.309707] loop5: detected capacity change from 0 to 40
[ 2726.336102] syz-executor.6: attempt to access beyond end of device
[ 2726.336102] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.338440] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:45:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23)

[ 2726.462758] loop2: detected capacity change from 0 to 40
21:45:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 20)

[ 2726.581855] syz-executor.5: attempt to access beyond end of device
[ 2726.581855] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.583721] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:45:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 7)

[ 2726.688284] loop4: detected capacity change from 0 to 40
[ 2726.811616] syz-executor.4: attempt to access beyond end of device
[ 2726.811616] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.813651] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2726.819677] loop0: detected capacity change from 0 to 40
[ 2726.840017] loop6: detected capacity change from 0 to 40
21:45:27 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:45:27 executing program 7:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:45:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2726.955928] syz-executor.2: attempt to access beyond end of device
[ 2726.955928] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2726.958009] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2726.964891] loop3: detected capacity change from 0 to 40
[ 2727.000755] loop5: detected capacity change from 0 to 40
[ 2727.096090] syz-executor.0: attempt to access beyond end of device
[ 2727.096090] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2727.099837] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2727.238676] syz-executor.6: attempt to access beyond end of device
[ 2727.238676] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2727.240465] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:45:41 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:45:41 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2740.458769] loop5: detected capacity change from 0 to 40
21:45:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21)

21:45:41 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:45:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23)

21:45:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:45:41 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24)

21:45:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8)

[ 2740.480945] loop6: detected capacity change from 0 to 40
[ 2740.481525] loop4: detected capacity change from 0 to 40
[ 2740.492028] loop3: detected capacity change from 0 to 40
[ 2740.522494] loop0: detected capacity change from 0 to 40
[ 2740.526668] loop2: detected capacity change from 0 to 40
[ 2740.539833] loop7: detected capacity change from 0 to 40
[ 2740.561610] FAULT_INJECTION: forcing a failure.
[ 2740.561610] name failslab, interval 1, probability 0, space 0, times 0
[ 2740.563480] CPU: 1 PID: 11516 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2740.564561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2740.565740] Call Trace:
[ 2740.566120]  <TASK>
[ 2740.566480]  dump_stack_lvl+0x8f/0xb7
[ 2740.567029]  should_fail_ex.cold+0x5/0xa
[ 2740.567694]  should_failslab+0x9/0x20
[ 2740.568230]  __kmem_cache_alloc_node+0x5b/0x400
[ 2740.568935]  ? iter_file_splice_write+0x169/0xcb0
[ 2740.569682]  ? iter_file_splice_write+0x169/0xcb0
[ 2740.570413]  __kmalloc+0x46/0xc0
[ 2740.570915]  iter_file_splice_write+0x169/0xcb0
[ 2740.571654]  ? generic_file_read_iter+0x330/0x550
[ 2740.572463]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2740.573233]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2740.573927]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2740.574731]  ? inode_security+0x105/0x140
[ 2740.575370]  ? security_file_permission+0xb5/0xe0
[ 2740.576129]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2740.576827]  direct_splice_actor+0x113/0x180
[ 2740.577516]  splice_direct_to_actor+0x33a/0x8c0
[ 2740.578163]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2740.578905]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2740.579754]  ? security_file_permission+0xb5/0xe0
[ 2740.580425]  do_splice_direct+0x1bc/0x290
[ 2740.581088]  ? __pfx_do_splice_direct+0x10/0x10
[ 2740.581818]  ? lock_is_held_type+0xdb/0x130
[ 2740.582421]  do_sendfile+0xb1d/0x1280
[ 2740.582952]  ? __pfx_do_sendfile+0x10/0x10
[ 2740.583637]  __x64_sys_sendfile64+0x248/0x2a0
[ 2740.584243]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2740.585003]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2740.585678]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2740.586367]  do_syscall_64+0x3f/0x90
[ 2740.586882]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2740.587548] RIP: 0033:0x7f706eb8fb19
[ 2740.588056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2740.590420] RSP: 002b:00007f706c105188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2740.591442] RAX: ffffffffffffffda RBX: 00007f706eca2f60 RCX: 00007f706eb8fb19
[ 2740.592352] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2740.593285] RBP: 00007f706c1051d0 R08: 0000000000000000 R09: 0000000000000000
[ 2740.594219] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2740.595150] R13: 00007ffea5f8199f R14: 00007f706c105300 R15: 0000000000022000
[ 2740.596121]  </TASK>
21:45:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:45:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22)

[ 2740.768965] loop4: detected capacity change from 0 to 40
[ 2740.824666] loop3: detected capacity change from 0 to 40
[ 2740.953876] syz-executor.0: attempt to access beyond end of device
[ 2740.953876] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2740.956560] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2740.963389] syz-executor.6: attempt to access beyond end of device
[ 2740.963389] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2740.965713] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2741.082944] syz-executor.2: attempt to access beyond end of device
[ 2741.082944] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2741.085717] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2741.209732] syz-executor.4: attempt to access beyond end of device
[ 2741.209732] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2741.211871] Buffer I/O error on dev loop4, logical block 10, lost async page write
21:45:55 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9)

21:45:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25)

21:45:55 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:45:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:45:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24)

[ 2754.773963] loop7: detected capacity change from 0 to 40
21:45:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23)

21:45:55 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:45:55 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2754.793512] loop2: detected capacity change from 0 to 40
[ 2754.802525] loop3: detected capacity change from 0 to 40
[ 2754.803725] loop4: detected capacity change from 0 to 40
[ 2754.821596] loop5: detected capacity change from 0 to 40
[ 2754.872115] loop0: detected capacity change from 0 to 40
[ 2754.893967] loop6: detected capacity change from 0 to 40
21:45:55 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2755.103994] loop3: detected capacity change from 0 to 40
[ 2755.118056] syz-executor.4: attempt to access beyond end of device
[ 2755.118056] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.119361] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2755.191536] syz-executor.2: attempt to access beyond end of device
[ 2755.191536] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.192716] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2755.259784] syz-executor.6: attempt to access beyond end of device
[ 2755.259784] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.260861] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2755.275959] syz-executor.0: attempt to access beyond end of device
[ 2755.275959] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.277403] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:45:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24)

21:45:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:45:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25)

21:45:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10)

21:45:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26)

[ 2755.452622] loop4: detected capacity change from 0 to 40
[ 2755.459480] loop3: detected capacity change from 0 to 40
[ 2755.515670] loop6: detected capacity change from 0 to 40
[ 2755.535944] loop2: detected capacity change from 0 to 40
[ 2755.614079] loop0: detected capacity change from 0 to 40
21:45:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:45:56 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2755.716462] loop3: detected capacity change from 0 to 40
[ 2755.763796] syz-executor.4: attempt to access beyond end of device
[ 2755.763796] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.764945] Buffer I/O error on dev loop4, logical block 10, lost async page write
21:45:56 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2755.788769] syz-executor.2: attempt to access beyond end of device
[ 2755.788769] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.789877] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:45:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2755.815956] syz-executor.6: attempt to access beyond end of device
[ 2755.815956] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.817080] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2755.831771] loop7: detected capacity change from 0 to 40
[ 2755.842927] syz-executor.0: attempt to access beyond end of device
[ 2755.842927] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2755.844023] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:45:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25)

21:45:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:45:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26)

[ 2755.910602] loop5: detected capacity change from 0 to 40
[ 2755.933090] loop3: detected capacity change from 0 to 40
[ 2755.964923] loop4: detected capacity change from 0 to 40
[ 2755.980855] loop2: detected capacity change from 0 to 40
[ 2756.110694] syz-executor.4: attempt to access beyond end of device
[ 2756.110694] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2756.111944] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2756.221897] syz-executor.2: attempt to access beyond end of device
[ 2756.221897] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2756.223096] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:46:12 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11)

21:46:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:46:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:46:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26)

[ 2771.631294] loop4: detected capacity change from 0 to 40
21:46:12 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27)

21:46:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:46:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27)

21:46:12 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2771.658383] loop3: detected capacity change from 0 to 40
[ 2771.666457] loop6: detected capacity change from 0 to 40
[ 2771.670836] loop5: detected capacity change from 0 to 40
[ 2771.678083] loop7: detected capacity change from 0 to 40
[ 2771.681790] loop0: detected capacity change from 0 to 40
[ 2771.719586] loop2: detected capacity change from 0 to 40
[ 2771.730830] FAT-fs (loop1): bogus number of reserved sectors
[ 2771.731930] FAT-fs (loop1): Can't find a valid FAT filesystem
21:46:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2771.794654] syz-executor.4: attempt to access beyond end of device
[ 2771.794654] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2771.795926] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2771.827897] loop3: detected capacity change from 0 to 40
[ 2771.862406] syz-executor.0: attempt to access beyond end of device
[ 2771.862406] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2771.863771] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:46:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27)

[ 2771.932913] loop4: detected capacity change from 0 to 40
21:46:12 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28)

[ 2772.039628] syz-executor.6: attempt to access beyond end of device
[ 2772.039628] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2772.040717] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2772.102003] syz-executor.4: attempt to access beyond end of device
[ 2772.102003] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2772.103468] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2772.146709] syz-executor.2: attempt to access beyond end of device
[ 2772.146709] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2772.148910] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:46:13 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12)

21:46:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28)

21:46:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2772.228557] loop0: detected capacity change from 0 to 40
21:46:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28)

[ 2772.267181] loop4: detected capacity change from 0 to 40
[ 2772.370475] loop6: detected capacity change from 0 to 40
[ 2772.445121] loop3: detected capacity change from 0 to 40
[ 2772.547659] loop2: detected capacity change from 0 to 40
[ 2772.624109] syz-executor.4: attempt to access beyond end of device
[ 2772.624109] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2772.626142] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2772.653573] syz-executor.0: attempt to access beyond end of device
[ 2772.653573] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2772.655541] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:46:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2772.721993] syz-executor.6: attempt to access beyond end of device
[ 2772.721993] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2772.723703] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:46:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:46:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29)

21:46:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2772.780005] syz-executor.2: attempt to access beyond end of device
[ 2772.780005] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2772.782076] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2772.862537] FAT-fs (loop1): bogus number of reserved sectors
[ 2772.863479] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2772.890888] loop4: detected capacity change from 0 to 40
[ 2772.892124] loop5: detected capacity change from 0 to 40
[ 2772.895696] loop3: detected capacity change from 0 to 40
[ 2773.241795] syz-executor.4: attempt to access beyond end of device
[ 2773.241795] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2773.244779] Buffer I/O error on dev loop4, logical block 10, lost async page write
21:46:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 13)

21:46:31 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:46:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:46:31 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:46:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29)

21:46:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:46:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30)

21:46:31 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29)

[ 2790.028286] loop5: detected capacity change from 0 to 40
[ 2790.029084] loop3: detected capacity change from 0 to 40
[ 2790.032776] loop0: detected capacity change from 0 to 40
[ 2790.037668] loop4: detected capacity change from 0 to 40
[ 2790.050903] loop7: detected capacity change from 0 to 40
[ 2790.060876] FAT-fs (loop1): bogus number of reserved sectors
[ 2790.061512] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2790.066632] loop2: detected capacity change from 0 to 40
21:46:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2790.118100] loop6: detected capacity change from 0 to 40
21:46:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2790.239927] FAULT_INJECTION: forcing a failure.
[ 2790.239927] name failslab, interval 1, probability 0, space 0, times 0
[ 2790.241400] CPU: 1 PID: 11659 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2790.242271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2790.243003] Call Trace:
[ 2790.243263]  <TASK>
[ 2790.243489]  dump_stack_lvl+0x8f/0xb7
[ 2790.243866]  should_fail_ex.cold+0x5/0xa
[ 2790.244249]  should_failslab+0x9/0x20
[ 2790.244613]  __kmem_cache_alloc_node+0x5b/0x400
[ 2790.245054]  ? iter_file_splice_write+0x169/0xcb0
[ 2790.245515]  ? iter_file_splice_write+0x169/0xcb0
[ 2790.245960]  __kmalloc+0x46/0xc0
[ 2790.246292]  iter_file_splice_write+0x169/0xcb0
[ 2790.246722]  ? generic_file_read_iter+0x330/0x550
[ 2790.247195]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2790.247693]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2790.248172]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2790.248672]  ? inode_security+0x105/0x140
[ 2790.249081]  ? security_file_permission+0xb5/0xe0
[ 2790.249549]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2790.250040]  direct_splice_actor+0x113/0x180
[ 2790.250470]  splice_direct_to_actor+0x33a/0x8c0
[ 2790.250907]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2790.251374]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2790.251730]  ? security_file_permission+0xb5/0xe0
[ 2790.252173]  do_splice_direct+0x1bc/0x290
[ 2790.252567]  ? __pfx_do_splice_direct+0x10/0x10
[ 2790.253011]  ? lock_is_held_type+0xdb/0x130
[ 2790.253437]  do_sendfile+0xb1d/0x1280
[ 2790.253719]  ? __pfx_do_sendfile+0x10/0x10
[ 2790.254116]  __x64_sys_sendfile64+0x248/0x2a0
[ 2790.254526]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2790.254859]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2790.255331]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2790.255690]  do_syscall_64+0x3f/0x90
[ 2790.256027]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2790.256376] RIP: 0033:0x7fd650a71b19
[ 2790.256706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2790.258334] RSP: 002b:00007fd64dfe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2790.258826] RAX: ffffffffffffffda RBX: 00007fd650b84f60 RCX: 00007fd650a71b19
[ 2790.259432] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2790.260107] RBP: 00007fd64dfe71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2790.260765] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2790.261412] R13: 00007fffca9186df R14: 00007fd64dfe7300 R15: 0000000000022000
[ 2790.262091]  </TASK>
[ 2790.322520] loop3: detected capacity change from 0 to 40
21:46:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 14)

[ 2790.377495] loop5: detected capacity change from 0 to 40
[ 2790.479736] syz-executor.4: attempt to access beyond end of device
[ 2790.479736] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2790.481698] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2790.515767] syz-executor.0: attempt to access beyond end of device
[ 2790.515767] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2790.517945] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2790.538935] syz-executor.2: attempt to access beyond end of device
[ 2790.538935] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2790.541083] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:46:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2790.655843] loop6: detected capacity change from 0 to 40
21:46:31 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30)

21:46:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:46:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31)

[ 2790.770729] loop3: detected capacity change from 0 to 40
[ 2790.855859] loop0: detected capacity change from 0 to 40
[ 2790.902012] loop5: detected capacity change from 0 to 40
[ 2790.912898] loop4: detected capacity change from 0 to 40
[ 2790.977528] syz-executor.6: attempt to access beyond end of device
[ 2790.977528] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2790.979527] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2791.144703] syz-executor.0: attempt to access beyond end of device
[ 2791.144703] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2791.146761] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2791.170663] syz-executor.4: attempt to access beyond end of device
[ 2791.170663] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2791.172936] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2805.233088] loop3: detected capacity change from 0 to 40
21:46:46 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30)

21:46:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32)

21:46:46 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31)

21:46:46 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:46:46 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:46:46 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:46:46 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 15)

21:46:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2805.238269] loop0: detected capacity change from 0 to 40
[ 2805.246360] loop4: detected capacity change from 0 to 40
[ 2805.259158] loop5: detected capacity change from 0 to 40
[ 2805.288705] FAT-fs (loop1): bogus number of reserved sectors
[ 2805.289210] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2805.301534] loop7: detected capacity change from 0 to 40
[ 2805.314602] loop2: detected capacity change from 0 to 40
[ 2805.316623] loop6: detected capacity change from 0 to 40
[ 2805.481413] syz-executor.4: attempt to access beyond end of device
[ 2805.481413] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2805.483389] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2805.512525] syz-executor.0: attempt to access beyond end of device
[ 2805.512525] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2805.514695] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2805.621012] syz-executor.2: attempt to access beyond end of device
[ 2805.621012] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2805.622528] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2805.677563] syz-executor.6: attempt to access beyond end of device
[ 2805.677563] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2805.679424] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2819.178039] loop3: detected capacity change from 0 to 40
21:47:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:47:00 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32)

21:47:00 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:47:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:47:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:47:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33)

21:47:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31)

21:47:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 16)

[ 2819.194859] loop2: detected capacity change from 0 to 40
[ 2819.207601] loop4: detected capacity change from 0 to 40
[ 2819.210011] loop6: detected capacity change from 0 to 40
[ 2819.217394] FAT-fs (loop1): bogus number of reserved sectors
[ 2819.218262] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2819.218894] loop5: detected capacity change from 0 to 40
[ 2819.256287] loop0: detected capacity change from 0 to 40
21:47:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:47:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2819.544004] syz-executor.6: attempt to access beyond end of device
[ 2819.544004] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2819.546932] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2819.551691] loop3: detected capacity change from 0 to 40
[ 2819.647021] syz-executor.4: attempt to access beyond end of device
[ 2819.647021] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2819.649443] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2819.687114] syz-executor.2: attempt to access beyond end of device
[ 2819.687114] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2819.689395] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2819.759045] loop5: detected capacity change from 0 to 40
[ 2819.786664] syz-executor.0: attempt to access beyond end of device
[ 2819.786664] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2819.788536] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:47:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:47:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 17)

21:47:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32)

21:47:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34)

21:47:00 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33)

21:47:01 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2820.059817] loop6: detected capacity change from 0 to 40
[ 2820.065739] loop3: detected capacity change from 0 to 40
[ 2820.094698] loop4: detected capacity change from 0 to 40
[ 2820.096784] loop2: detected capacity change from 0 to 40
21:47:01 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2820.176117] loop5: detected capacity change from 0 to 40
21:47:01 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2820.196426] loop0: detected capacity change from 0 to 40
[ 2820.278106] syz-executor.6: attempt to access beyond end of device
[ 2820.278106] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2820.280438] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2820.367335] syz-executor.3: attempt to access beyond end of device
[ 2820.367335] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2820.369741] Buffer I/O error on dev loop3, logical block 10, lost async page write
21:47:01 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2820.415974] FAT-fs (loop1): bogus number of reserved sectors
[ 2820.416798] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2820.473635] syz-executor.0: attempt to access beyond end of device
[ 2820.473635] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2820.475635] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2820.553621] syz-executor.4: attempt to access beyond end of device
[ 2820.553621] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2820.556093] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2820.559696] syz-executor.2: attempt to access beyond end of device
[ 2820.559696] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2820.561738] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2820.616402] loop5: detected capacity change from 0 to 40
21:47:01 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 18)

21:47:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2820.810642] loop3: detected capacity change from 0 to 40
[ 2820.854621] loop6: detected capacity change from 0 to 40
[ 2821.099617] syz-executor.3: attempt to access beyond end of device
[ 2821.099617] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2821.103636] Buffer I/O error on dev loop3, logical block 10, lost async page write
21:47:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35)

21:47:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 19)

21:47:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:47:16 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34)

21:47:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33)

21:47:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:47:16 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2835.503354] loop3: detected capacity change from 0 to 40
[ 2835.504787] loop1: detected capacity change from 0 to 40
21:47:16 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2835.513929] FAT-fs (loop1): bogus number of reserved sectors
[ 2835.514441] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2835.520620] loop4: detected capacity change from 0 to 40
[ 2835.522390] loop5: detected capacity change from 0 to 40
[ 2835.535688] loop6: detected capacity change from 0 to 40
[ 2835.571964] loop0: detected capacity change from 0 to 40
[ 2835.583413] loop2: detected capacity change from 0 to 40
21:47:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2835.805665] bio_check_eod: 1 callbacks suppressed
[ 2835.805681] syz-executor.6: attempt to access beyond end of device
[ 2835.805681] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2835.807618] buffer_io_error: 1 callbacks suppressed
[ 2835.807628] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2835.819028] syz-executor.4: attempt to access beyond end of device
[ 2835.819028] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2835.821488] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2835.837469] syz-executor.3: attempt to access beyond end of device
[ 2835.837469] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2835.838559] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2835.844670] loop5: detected capacity change from 0 to 40
[ 2835.857424] syz-executor.0: attempt to access beyond end of device
[ 2835.857424] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2835.858586] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:47:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36)

21:47:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 20)

[ 2835.941822] syz-executor.2: attempt to access beyond end of device
[ 2835.941822] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2835.943761] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2836.045477] loop4: detected capacity change from 0 to 40
[ 2836.049675] loop6: detected capacity change from 0 to 40
[ 2836.350519] syz-executor.4: attempt to access beyond end of device
[ 2836.350519] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2836.352523] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2836.398785] syz-executor.6: attempt to access beyond end of device
[ 2836.398785] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2836.400705] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:47:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21)

21:47:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:47:31 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:47:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34)

21:47:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:47:31 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35)

21:47:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37)

[ 2850.704600] loop1: detected capacity change from 0 to 40
[ 2850.705060] loop4: detected capacity change from 0 to 40
[ 2850.707079] loop6: detected capacity change from 0 to 40
[ 2850.715432] loop2: detected capacity change from 0 to 40
[ 2850.716037] FAT-fs (loop1): bogus number of reserved sectors
[ 2850.716507] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2850.717678] loop5: detected capacity change from 0 to 40
[ 2850.726551] loop0: detected capacity change from 0 to 40
21:47:31 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2850.754030] FAT-fs (loop7): bogus number of reserved sectors
[ 2850.754456] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2850.767350] loop3: detected capacity change from 0 to 40
[ 2850.794535] FAULT_INJECTION: forcing a failure.
[ 2850.794535] name failslab, interval 1, probability 0, space 0, times 0
[ 2850.795499] CPU: 0 PID: 11807 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2850.796085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2850.796692] Call Trace:
[ 2850.796884]  <TASK>
[ 2850.797055]  dump_stack_lvl+0x8f/0xb7
[ 2850.797354]  should_fail_ex.cold+0x5/0xa
[ 2850.797667]  should_failslab+0x9/0x20
[ 2850.797959]  __kmem_cache_alloc_node+0x5b/0x400
[ 2850.798385]  ? iter_file_splice_write+0x169/0xcb0
[ 2850.798751]  ? iter_file_splice_write+0x169/0xcb0
[ 2850.799111]  __kmalloc+0x46/0xc0
[ 2850.799380]  iter_file_splice_write+0x169/0xcb0
[ 2850.799727]  ? generic_file_read_iter+0x330/0x550
[ 2850.800099]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2850.800481]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2850.800863]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2850.801256]  ? inode_security+0x105/0x140
[ 2850.801591]  ? security_file_permission+0xb5/0xe0
[ 2850.801973]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2850.802356]  direct_splice_actor+0x113/0x180
[ 2850.802691]  splice_direct_to_actor+0x33a/0x8c0
[ 2850.803044]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2850.803414]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2850.803756]  ? security_file_permission+0xb5/0xe0
[ 2850.804128]  do_splice_direct+0x1bc/0x290
[ 2850.804459]  ? __pfx_do_splice_direct+0x10/0x10
[ 2850.804816]  ? lock_is_held_type+0xdb/0x130
[ 2850.805149]  do_sendfile+0xb1d/0x1280
[ 2850.805449]  ? __pfx_do_sendfile+0x10/0x10
[ 2850.805785]  __x64_sys_sendfile64+0x248/0x2a0
[ 2850.806125]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2850.806491]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2850.806866]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2850.807246]  do_syscall_64+0x3f/0x90
[ 2850.807527]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2850.807907] RIP: 0033:0x7fd650a71b19
[ 2850.808161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2850.809443] RSP: 002b:00007fd64dfe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2850.809990] RAX: ffffffffffffffda RBX: 00007fd650b84f60 RCX: 00007fd650a71b19
[ 2850.810500] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2850.811011] RBP: 00007fd64dfe71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2850.811527] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2850.812044] R13: 00007fffca9186df R14: 00007fd64dfe7300 R15: 0000000000022000
[ 2850.812574]  </TASK>
21:47:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:47:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22)

[ 2850.979320] loop5: detected capacity change from 0 to 40
[ 2851.010924] loop6: detected capacity change from 0 to 40
[ 2851.013370] syz-executor.4: attempt to access beyond end of device
[ 2851.013370] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.014393] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2851.071868] syz-executor.2: attempt to access beyond end of device
[ 2851.071868] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.074569] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2851.086849] syz-executor.0: attempt to access beyond end of device
[ 2851.086849] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.087941] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2851.118997] syz-executor.3: attempt to access beyond end of device
[ 2851.118997] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.121498] Buffer I/O error on dev loop3, logical block 10, lost async page write
21:47:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35)

21:47:32 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36)

21:47:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:47:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38)

[ 2851.209342] loop2: detected capacity change from 0 to 40
21:47:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2851.303426] loop0: detected capacity change from 0 to 40
[ 2851.314997] loop5: detected capacity change from 0 to 40
[ 2851.330436] loop4: detected capacity change from 0 to 40
[ 2851.394464] loop3: detected capacity change from 0 to 40
21:47:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2851.416651] syz-executor.6: attempt to access beyond end of device
[ 2851.416651] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.418406] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:47:32 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23)

[ 2851.541383] loop5: detected capacity change from 0 to 40
[ 2851.582569] loop6: detected capacity change from 0 to 40
[ 2851.599716] syz-executor.2: attempt to access beyond end of device
[ 2851.599716] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.601607] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:47:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2851.710465] syz-executor.4: attempt to access beyond end of device
[ 2851.710465] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.711677] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2851.713388] loop5: detected capacity change from 0 to 40
21:47:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:47:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36)

21:47:32 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2851.756034] syz-executor.3: attempt to access beyond end of device
[ 2851.756034] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.758438] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2851.761914] syz-executor.6: attempt to access beyond end of device
[ 2851.761914] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.763106] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2851.764654] syz-executor.0: attempt to access beyond end of device
[ 2851.764654] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2851.766504] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2851.781290] loop2: detected capacity change from 0 to 40
[ 2851.831626] loop1: detected capacity change from 0 to 40
[ 2851.842947] FAT-fs (loop1): bogus number of reserved sectors
[ 2851.843574] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2851.899028] FAT-fs (loop7): bogus number of reserved sectors
[ 2851.900005] FAT-fs (loop7): Can't find a valid FAT filesystem
21:47:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:47:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39)

21:47:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:47:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:47:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:47:48 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24)

21:47:48 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37)

21:47:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37)

[ 2867.795845] loop3: detected capacity change from 0 to 40
[ 2867.796871] loop1: detected capacity change from 0 to 40
[ 2867.803360] FAT-fs (loop1): bogus number of reserved sectors
[ 2867.803755] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2867.838206] FAT-fs (loop7): bogus number of reserved sectors
[ 2867.839244] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2867.842046] loop4: detected capacity change from 0 to 40
[ 2867.858560] loop2: detected capacity change from 0 to 40
[ 2867.864432] loop0: detected capacity change from 0 to 40
[ 2867.865500] loop6: detected capacity change from 0 to 40
[ 2867.875714] loop5: detected capacity change from 0 to 40
[ 2867.949653] FAULT_INJECTION: forcing a failure.
[ 2867.949653] name failslab, interval 1, probability 0, space 0, times 0
[ 2867.951783] CPU: 0 PID: 11867 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2867.952958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2867.954042] Call Trace:
[ 2867.954399]  <TASK>
[ 2867.954720]  dump_stack_lvl+0x8f/0xb7
[ 2867.955258]  should_fail_ex.cold+0x5/0xa
[ 2867.955846]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2867.956504]  should_failslab+0x9/0x20
[ 2867.957041]  kmem_cache_alloc+0x5a/0x410
[ 2867.957614]  fat_cache_add.part.0+0x5b4/0xb50
[ 2867.958263]  fat_get_cluster+0x922/0xd40
[ 2867.958845]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2867.959497]  ? mark_held_locks+0x9e/0xe0
[ 2867.960070]  fat_get_mapped_cluster+0x216/0x450
[ 2867.960775]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 2867.961540]  ? fat_bmap+0x21f/0x460
[ 2867.962090]  fat_bmap+0x1fc/0x460
[ 2867.962623]  fat_get_block+0x33e/0x930
[ 2867.963212]  ? __pfx_fat_get_block+0x10/0x10
[ 2867.963853]  ? lock_is_held_type+0xdb/0x130
[ 2867.964539]  __block_write_begin_int+0x380/0x13d0
[ 2867.965257]  ? __pfx_fat_get_block+0x10/0x10
[ 2867.965918]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2867.966680]  ? PageHeadHuge+0x169/0x1b0
[ 2867.967288]  ? __pfx_fat_get_block+0x10/0x10
[ 2867.967929]  block_write_begin+0xb9/0x450
[ 2867.968561]  cont_write_begin+0x4fe/0x700
[ 2867.969182]  ? lock_is_held_type+0xdb/0x130
[ 2867.969825]  ? __pfx_fat_get_block+0x10/0x10
[ 2867.970472]  ? __pfx_cont_write_begin+0x10/0x10
[ 2867.971151]  ? lock_release+0x3b6/0x750
[ 2867.971742]  ? __mark_inode_dirty+0x5a6/0xe70
[ 2867.972427]  ? mark_held_locks+0x9e/0xe0
[ 2867.973308]  fat_write_begin+0x89/0x180
[ 2867.973971]  ? __pfx_fat_get_block+0x10/0x10
[ 2867.974682]  generic_perform_write+0x25a/0x580
[ 2867.975449]  ? __pfx_generic_perform_write+0x10/0x10
[ 2867.976261]  ? __pfx_fat_update_time+0x10/0x10
[ 2867.977023]  ? __pfx_file_update_time+0x10/0x10
[ 2867.977828]  ? generic_write_checks+0x2c0/0x400
[ 2867.978631]  __generic_file_write_iter+0x308/0x4b0
[ 2867.979465]  ? do_sendfile+0xb1d/0x1280
[ 2867.980147]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 2867.980967]  generic_file_write_iter+0xe7/0x350
[ 2867.981772]  do_iter_readv_writev+0x211/0x3c0
[ 2867.982542]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2867.983398]  ? avc_policy_seqno+0xd/0x70
[ 2867.984104]  ? security_file_permission+0xb5/0xe0
[ 2867.984946]  do_iter_write+0x18b/0x700
[ 2867.985632]  ? lock_is_held_type+0xdb/0x130
[ 2867.986397]  vfs_iter_write+0x74/0xb0
[ 2867.986729] bio_check_eod: 1 callbacks suppressed
[ 2867.986745] syz-executor.3: attempt to access beyond end of device
[ 2867.986745] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2867.987046]  iter_file_splice_write+0x73e/0xcb0
[ 2867.987495] buffer_io_error: 1 callbacks suppressed
[ 2867.987525] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2867.989255]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2867.989296]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2867.989340]  ? write_comp_data+0x3c/0x90
[ 2867.993587]  ? security_file_permission+0xb5/0xe0
[ 2867.994349]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2867.995149]  direct_splice_actor+0x113/0x180
[ 2867.995863]  splice_direct_to_actor+0x33a/0x8c0
[ 2867.996605]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2867.997427]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2867.998241]  ? security_file_permission+0xb5/0xe0
[ 2867.998922]  do_splice_direct+0x1bc/0x290
[ 2867.999554]  ? __pfx_do_splice_direct+0x10/0x10
[ 2868.000313]  ? lock_is_held_type+0xdb/0x130
[ 2868.000936]  do_sendfile+0xb1d/0x1280
[ 2868.001564]  ? __pfx_do_sendfile+0x10/0x10
[ 2868.002275]  __x64_sys_sendfile64+0x248/0x2a0
[ 2868.002894]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2868.003644]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2868.004471]  ? syscall_enter_from_user_mode+0x21/0x50
21:47:49 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2868.005329]  do_syscall_64+0x3f/0x90
[ 2868.006078]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2868.006895] RIP: 0033:0x7f706eb8fb19
[ 2868.007458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2868.009940] RSP: 002b:00007f706c105188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2868.010965] RAX: ffffffffffffffda RBX: 00007f706eca2f60 RCX: 00007f706eb8fb19
[ 2868.011902] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2868.012841] RBP: 00007f706c1051d0 R08: 0000000000000000 R09: 0000000000000000
[ 2868.013770] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2868.014697] R13: 00007ffea5f8199f R14: 00007f706c105300 R15: 0000000000022000
[ 2868.015633]  </TASK>
[ 2868.147900] syz-executor.0: attempt to access beyond end of device
[ 2868.147900] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2868.150552] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2868.208954] syz-executor.6: attempt to access beyond end of device
[ 2868.208954] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2868.210980] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2868.215354] loop5: detected capacity change from 0 to 40
[ 2868.219569] syz-executor.2: attempt to access beyond end of device
[ 2868.219569] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2868.220861] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:47:49 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:47:49 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38)

21:47:49 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38)

[ 2868.341698] loop2: detected capacity change from 0 to 40
[ 2868.344492] loop0: detected capacity change from 0 to 40
[ 2868.384434] loop3: detected capacity change from 0 to 40
[ 2868.395444] syz-executor.4: attempt to access beyond end of device
[ 2868.395444] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2868.396675] Buffer I/O error on dev loop4, logical block 10, lost async page write
21:47:49 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25)

[ 2868.506518] syz-executor.2: attempt to access beyond end of device
[ 2868.506518] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2868.507609] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2868.518855] syz-executor.0: attempt to access beyond end of device
[ 2868.518855] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2868.520092] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2868.594729] loop6: detected capacity change from 0 to 40
[ 2868.646081] syz-executor.3: attempt to access beyond end of device
[ 2868.646081] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2868.648451] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2868.757404] syz-executor.6: attempt to access beyond end of device
[ 2868.757404] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2868.759447] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:48:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:48:04 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:48:04 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39)

21:48:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 40)

21:48:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39)

21:48:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26)

21:48:04 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:48:04 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2883.983046] loop5: detected capacity change from 0 to 40
[ 2883.984110] FAT-fs (loop7): bogus number of reserved sectors
[ 2883.985008] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2883.985117] loop6: detected capacity change from 0 to 40
[ 2883.987601] loop3: detected capacity change from 0 to 40
[ 2883.988852] loop2: detected capacity change from 0 to 40
[ 2883.993549] loop0: detected capacity change from 0 to 40
[ 2883.999377] loop1: detected capacity change from 0 to 40
[ 2884.011700] loop4: detected capacity change from 0 to 40
[ 2884.018901] FAT-fs (loop1): bogus number of reserved sectors
[ 2884.019828] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2884.161022] FAULT_INJECTION: forcing a failure.
[ 2884.161022] name failslab, interval 1, probability 0, space 0, times 0
[ 2884.163423] CPU: 0 PID: 11904 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2884.164409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2884.165402] Call Trace:
[ 2884.165724]  <TASK>
[ 2884.166018]  dump_stack_lvl+0x8f/0xb7
[ 2884.166506]  should_fail_ex.cold+0x5/0xa
[ 2884.167028]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2884.167612]  should_failslab+0x9/0x20
[ 2884.168095]  kmem_cache_alloc+0x5a/0x410
[ 2884.168615]  fat_cache_add.part.0+0x5b4/0xb50
[ 2884.169206]  fat_get_cluster+0x922/0xd40
[ 2884.169748]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2884.170360]  fat_get_mapped_cluster+0x216/0x450
[ 2884.170949]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 2884.171632]  fat_bmap+0x1fc/0x460
[ 2884.172100]  fat_get_block+0x33e/0x930
[ 2884.172620]  ? __pfx_fat_get_block+0x10/0x10
[ 2884.173190]  ? lock_is_held_type+0xdb/0x130
[ 2884.173776]  __block_write_begin_int+0x380/0x13d0
[ 2884.174400]  ? __pfx_fat_get_block+0x10/0x10
[ 2884.174984]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2884.175659]  ? PageHeadHuge+0x169/0x1b0
[ 2884.176194]  ? __pfx_fat_get_block+0x10/0x10
[ 2884.176765]  block_write_begin+0xb9/0x450
[ 2884.177304]  cont_write_begin+0x4fe/0x700
[ 2884.177845]  ? lock_is_held_type+0xdb/0x130
[ 2884.178412]  ? __pfx_fat_get_block+0x10/0x10
[ 2884.178975]  ? __pfx_cont_write_begin+0x10/0x10
[ 2884.179570]  ? lock_release+0x3b6/0x750
[ 2884.180093]  ? __mark_inode_dirty+0x5a6/0xe70
[ 2884.180702]  ? mark_held_locks+0x9e/0xe0
[ 2884.181241]  fat_write_begin+0x89/0x180
[ 2884.181743]  ? __pfx_fat_get_block+0x10/0x10
[ 2884.182314]  generic_perform_write+0x25a/0x580
[ 2884.182926]  ? __pfx_generic_perform_write+0x10/0x10
[ 2884.183566]  ? __pfx_fat_update_time+0x10/0x10
[ 2884.184153]  ? __pfx_file_update_time+0x10/0x10
[ 2884.184776]  ? generic_write_checks+0x2c0/0x400
[ 2884.185386]  __generic_file_write_iter+0x308/0x4b0
[ 2884.186021]  ? do_sendfile+0xb1d/0x1280
[ 2884.186542]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 2884.187136]  generic_file_write_iter+0xe7/0x350
[ 2884.187735]  do_iter_readv_writev+0x211/0x3c0
[ 2884.188319]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2884.188934]  ? avc_policy_seqno+0xd/0x70
[ 2884.189465]  ? security_file_permission+0xb5/0xe0
[ 2884.190078]  do_iter_write+0x18b/0x700
[ 2884.190595]  ? lock_is_held_type+0xdb/0x130
[ 2884.191149]  vfs_iter_write+0x74/0xb0
[ 2884.191659]  iter_file_splice_write+0x73e/0xcb0
[ 2884.192259]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2884.192919]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2884.193575]  ? inode_security+0x105/0x140
[ 2884.194125]  ? security_file_permission+0xb5/0xe0
[ 2884.194734]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2884.195392]  direct_splice_actor+0x113/0x180
[ 2884.195939]  splice_direct_to_actor+0x33a/0x8c0
[ 2884.196504]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2884.197120]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2884.197750]  ? security_file_permission+0xb5/0xe0
[ 2884.198347]  do_splice_direct+0x1bc/0x290
[ 2884.198851]  ? __pfx_do_splice_direct+0x10/0x10
[ 2884.199429]  ? lock_is_held_type+0xdb/0x130
[ 2884.199980]  do_sendfile+0xb1d/0x1280
[ 2884.200485]  ? __pfx_do_sendfile+0x10/0x10
[ 2884.201074]  __x64_sys_sendfile64+0x248/0x2a0
[ 2884.201637]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2884.202240]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2884.202862]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2884.203499]  do_syscall_64+0x3f/0x90
[ 2884.203973]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2884.204601] RIP: 0033:0x7fd263e4bb19
[ 2884.205078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2884.207284] RSP: 002b:00007fd2613c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2884.208229] RAX: ffffffffffffffda RBX: 00007fd263f5ef60 RCX: 00007fd263e4bb19
[ 2884.209116] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2884.209996] RBP: 00007fd2613c11d0 R08: 0000000000000000 R09: 0000000000000000
[ 2884.210882] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2884.211757] R13: 00007ffc9718118f R14: 00007fd2613c1300 R15: 0000000000022000
[ 2884.212670]  </TASK>
[ 2884.231624] FAULT_INJECTION: forcing a failure.
[ 2884.231624] name failslab, interval 1, probability 0, space 0, times 0
[ 2884.233540] CPU: 0 PID: 11903 Comm: syz-executor.2 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2884.234491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2884.235464] Call Trace:
[ 2884.235775]  <TASK>
[ 2884.236059]  dump_stack_lvl+0x8f/0xb7
[ 2884.236545]  should_fail_ex.cold+0x5/0xa
[ 2884.237063]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2884.237636]  should_failslab+0x9/0x20
[ 2884.238120]  kmem_cache_alloc+0x5a/0x410
[ 2884.238635]  fat_cache_add.part.0+0x5b4/0xb50
[ 2884.239185]  ? fat_get_cluster+0x8d9/0xd40
[ 2884.239713]  fat_get_cluster+0x922/0xd40
[ 2884.240228]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2884.240842]  fat_get_mapped_cluster+0x216/0x450
[ 2884.241409]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 2884.242058]  ? perf_swevent_event+0x6c/0x550
[ 2884.242629]  fat_bmap+0x1fc/0x460
[ 2884.243098]  fat_get_block+0x33e/0x930
[ 2884.243614]  ? __pfx_fat_get_block+0x10/0x10
[ 2884.244182]  ? lock_is_held_type+0xdb/0x130
[ 2884.244774]  __block_write_begin_int+0x380/0x13d0
[ 2884.245402]  ? __pfx_fat_get_block+0x10/0x10
[ 2884.245981]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2884.246651]  ? PageHeadHuge+0x169/0x1b0
[ 2884.247180]  ? __pfx_fat_get_block+0x10/0x10
[ 2884.247743]  block_write_begin+0xb9/0x450
[ 2884.248284]  cont_write_begin+0x4fe/0x700
[ 2884.248836]  ? lock_is_held_type+0xdb/0x130
[ 2884.249397]  ? __pfx_fat_get_block+0x10/0x10
[ 2884.249971]  ? __pfx_cont_write_begin+0x10/0x10
[ 2884.250561]  ? lock_release+0x3b6/0x750
[ 2884.251076]  ? __mark_inode_dirty+0x5a6/0xe70
[ 2884.251666]  ? mark_held_locks+0x9e/0xe0
[ 2884.252192]  fat_write_begin+0x89/0x180
[ 2884.252709]  ? __pfx_fat_get_block+0x10/0x10
[ 2884.253276]  generic_perform_write+0x25a/0x580
[ 2884.253865]  ? __pfx_generic_perform_write+0x10/0x10
[ 2884.254509]  ? __pfx_fat_update_time+0x10/0x10
[ 2884.255091]  ? __pfx_file_update_time+0x10/0x10
[ 2884.255688]  ? generic_write_checks+0x2c0/0x400
[ 2884.256281]  __generic_file_write_iter+0x308/0x4b0
[ 2884.256922]  ? do_sendfile+0xb1d/0x1280
[ 2884.257433]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 2884.258024]  generic_file_write_iter+0xe7/0x350
[ 2884.258627]  do_iter_readv_writev+0x211/0x3c0
[ 2884.259204]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2884.259825]  ? avc_policy_seqno+0xd/0x70
[ 2884.260347]  ? security_file_permission+0xb5/0xe0
[ 2884.260979]  do_iter_write+0x18b/0x700
[ 2884.261484]  ? lock_is_held_type+0xdb/0x130
[ 2884.262049]  vfs_iter_write+0x74/0xb0
[ 2884.262545]  iter_file_splice_write+0x73e/0xcb0
[ 2884.263148]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2884.263791]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2884.264454]  ? inode_security+0x105/0x140
[ 2884.265019]  ? security_file_permission+0xb5/0xe0
[ 2884.265631]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2884.266275]  direct_splice_actor+0x113/0x180
[ 2884.266835]  splice_direct_to_actor+0x33a/0x8c0
[ 2884.267416]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2884.268039]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2884.268681]  ? security_file_permission+0xb5/0xe0
[ 2884.269303]  do_splice_direct+0x1bc/0x290
[ 2884.269827]  ? __pfx_do_splice_direct+0x10/0x10
[ 2884.270421]  ? lock_is_held_type+0xdb/0x130
[ 2884.270984]  do_sendfile+0xb1d/0x1280
[ 2884.271488]  ? __pfx_do_sendfile+0x10/0x10
[ 2884.272049]  __x64_sys_sendfile64+0x248/0x2a0
[ 2884.272609]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2884.273251]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2884.273889]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2884.274530]  do_syscall_64+0x3f/0x90
[ 2884.275006]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2884.275628] RIP: 0033:0x7fcad440bb19
[ 2884.276087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2884.278241] RSP: 002b:00007fcad1981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2884.279149] RAX: ffffffffffffffda RBX: 00007fcad451ef60 RCX: 00007fcad440bb19
[ 2884.280004] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2884.280863] RBP: 00007fcad19811d0 R08: 0000000000000000 R09: 0000000000000000
[ 2884.281715] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2884.282572] R13: 00007ffcb7d7eb4f R14: 00007fcad1981300 R15: 0000000000022000
[ 2884.283456]  </TASK>
21:48:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2884.379982] syz-executor.4: attempt to access beyond end of device
[ 2884.379982] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2884.381774] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2884.408778] syz-executor.6: attempt to access beyond end of device
[ 2884.408778] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2884.410745] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2884.433084] syz-executor.3: attempt to access beyond end of device
[ 2884.433084] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2884.435050] Buffer I/O error on dev loop3, logical block 10, lost async page write
21:48:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27)

[ 2884.476092] loop5: detected capacity change from 0 to 40
[ 2884.509533] syz-executor.0: attempt to access beyond end of device
[ 2884.509533] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2884.511425] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:48:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 41)

[ 2884.630939] loop6: detected capacity change from 0 to 40
21:48:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 40)

[ 2884.666899] loop0: detected capacity change from 0 to 40
21:48:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2884.760626] loop4: detected capacity change from 0 to 40
[ 2884.775343] loop3: detected capacity change from 0 to 40
[ 2884.821510] syz-executor.5: attempt to access beyond end of device
[ 2884.821510] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2884.823043] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2884.829539] syz-executor.0: attempt to access beyond end of device
[ 2884.829539] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2884.830947] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:48:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:48:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2884.928366] loop2: detected capacity change from 0 to 40
[ 2884.952263] loop1: detected capacity change from 0 to 40
[ 2884.962670] FAT-fs (loop1): bogus number of reserved sectors
[ 2884.963237] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2884.965453] syz-executor.6: attempt to access beyond end of device
[ 2884.965453] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2884.966563] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2884.996966] syz-executor.4: attempt to access beyond end of device
[ 2884.996966] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2885.000443] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2885.022522] syz-executor.3: attempt to access beyond end of device
[ 2885.022522] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2885.023906] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2885.119682] syz-executor.2: attempt to access beyond end of device
[ 2885.119682] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2885.120756] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:48:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:48:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 41)

21:48:19 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:48:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockname$inet(r1, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, r1, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
finit_module(r3, &(0x7f0000000240)='user.', 0x1)

21:48:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 42)

21:48:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28)

21:48:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:48:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2898.434636] loop6: detected capacity change from 0 to 40
[ 2898.435581] loop3: detected capacity change from 0 to 40
[ 2898.438707] FAT-fs (loop7): bogus number of reserved sectors
[ 2898.439220] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2898.444795] loop2: detected capacity change from 0 to 40
[ 2898.477020] loop5: detected capacity change from 0 to 40
[ 2898.506238] loop0: detected capacity change from 0 to 40
[ 2898.512877] loop1: detected capacity change from 0 to 40
[ 2898.520966] loop4: detected capacity change from 0 to 40
[ 2898.537522] FAT-fs (loop1): bogus number of reserved sectors
[ 2898.538481] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2898.749707] syz-executor.3: attempt to access beyond end of device
[ 2898.749707] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2898.751799] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2898.784667] syz-executor.5: attempt to access beyond end of device
[ 2898.784667] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2898.786350] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2898.862571] syz-executor.6: attempt to access beyond end of device
[ 2898.862571] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2898.864912] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:48:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29)

21:48:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2899.054751] syz-executor.2: attempt to access beyond end of device
[ 2899.054751] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.057031] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:48:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2899.075072] syz-executor.4: attempt to access beyond end of device
[ 2899.075072] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.077110] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2899.102722] loop6: detected capacity change from 0 to 40
[ 2899.205723] syz-executor.0: attempt to access beyond end of device
[ 2899.205723] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.207594] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2899.294295] loop5: detected capacity change from 0 to 40
[ 2899.316558] loop3: detected capacity change from 0 to 40
21:48:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 42)

21:48:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 43)

[ 2899.417311] loop0: detected capacity change from 0 to 40
21:48:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r1, @ANYBLOB="7f000000000000002e2f66696c653000ed029aeffec7ef0d66ea1e256e8a3a6c153c7138a64912eedcc16ca8ecc37fb618414dcd89"])
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:48:20 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2899.487946] syz-executor.5: attempt to access beyond end of device
[ 2899.487946] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.489938] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2899.524195] loop4: detected capacity change from 0 to 40
21:48:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2899.584686] syz-executor.6: attempt to access beyond end of device
[ 2899.584686] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.586360] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2899.612938] loop2: detected capacity change from 0 to 40
[ 2899.615062] FAT-fs (loop7): bogus number of reserved sectors
[ 2899.615701] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2899.635859] syz-executor.3: attempt to access beyond end of device
[ 2899.635859] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.637401] Buffer I/O error on dev loop3, logical block 10, lost async page write
21:48:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2899.674725] syz-executor.0: attempt to access beyond end of device
[ 2899.674725] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2899.676416] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:48:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30)

[ 2899.734809] loop1: detected capacity change from 0 to 40
[ 2899.742002] FAT-fs (loop1): bogus number of reserved sectors
[ 2899.742825] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2899.821008] loop5: detected capacity change from 0 to 40
21:48:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2899.871047] loop6: detected capacity change from 0 to 40
21:48:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 43)

[ 2899.938522] loop3: detected capacity change from 0 to 40
[ 2899.980993] loop0: detected capacity change from 0 to 40
[ 2915.683175] loop4: detected capacity change from 0 to 40
21:48:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 44)

21:48:36 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:48:36 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:48:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 44)

21:48:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:48:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31)

21:48:36 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:48:36 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chroot(&(0x7f0000000380)='./file1\x00')
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
sendfile(r0, r0, &(0x7f0000000240), 0x33fa0339)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x7f, 0x4e, 0x0, 0x9, 0x0, 0x6, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0xe5e3, 0xb99}, 0x288b, 0x2a, 0xfffffff7, 0x7, 0x2cdd7e9a, 0x3, 0x401, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 2915.708874] loop3: detected capacity change from 0 to 40
[ 2915.731939] loop7: detected capacity change from 0 to 40
[ 2915.733946] loop6: detected capacity change from 0 to 40
[ 2915.742951] FAT-fs (loop7): bogus number of reserved sectors
[ 2915.743410] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2915.745351] loop0: detected capacity change from 0 to 40
[ 2915.783010] loop1: detected capacity change from 0 to 40
[ 2915.784438] loop5: detected capacity change from 0 to 40
[ 2915.784531] loop2: detected capacity change from 0 to 40
[ 2915.788894] FAT-fs (loop1): bogus number of reserved sectors
[ 2915.789441] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2915.900774] bio_check_eod: 6 callbacks suppressed
[ 2915.900786] syz-executor.4: attempt to access beyond end of device
[ 2915.900786] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2915.902495] buffer_io_error: 6 callbacks suppressed
[ 2915.902505] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2915.959668] syz-executor.3: attempt to access beyond end of device
[ 2915.959668] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2915.960944] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2916.033493] syz-executor.5: attempt to access beyond end of device
[ 2916.033493] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2916.034655] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2916.037804] syz-executor.6: attempt to access beyond end of device
[ 2916.037804] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2916.039003] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2916.086957] syz-executor.0: attempt to access beyond end of device
[ 2916.086957] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2916.088468] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:48:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 45)

[ 2916.134752] syz-executor.2: attempt to access beyond end of device
[ 2916.134752] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2916.136392] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:48:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:48:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32)

21:48:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2916.246294] syz-executor.2: attempt to access beyond end of device
[ 2916.246294] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2916.248423] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2916.269072] loop4: detected capacity change from 0 to 40
21:48:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 45)

[ 2916.299401] loop3: detected capacity change from 0 to 40
[ 2916.355626] loop5: detected capacity change from 0 to 40
[ 2916.376040] loop6: detected capacity change from 0 to 40
21:48:37 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x200000, 0x10)
symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00')
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
fremovexattr(r2, &(0x7f0000000340)=@known='user.syz\x00')
openat(r2, &(0x7f0000000240)='./file1\x00', 0xc1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockname$inet(r3, 0x0, &(0x7f00000000c0))
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000300)=0x4)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0x9)

[ 2916.442022] loop0: detected capacity change from 0 to 40
[ 2916.478007] loop2: detected capacity change from 0 to 40
[ 2916.507553] syz-executor.3: attempt to access beyond end of device
[ 2916.507553] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2916.508762] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2916.647648] syz-executor.4: attempt to access beyond end of device
[ 2916.647648] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2916.649419] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2916.687086] syz-executor.5: attempt to access beyond end of device
[ 2916.687086] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2916.689088] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:48:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:48:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="f3d77f176683dcbe6d0560242117434c4c37a81394fca94b7ac8dd748305e33eca5c8c7d6891", 0x26}, {&(0x7f0000000300)="1fcbdc5cc34e91ad960d0064fabb070b228c914b1a5cdfdcc5218eeadfca7a77ed99d57e5fcdb38fdf48b5adb808bcde5fe9838874aaa81dbbc220c8fb714d9dde2fd66e8416e6f8401f8d", 0x4b}], 0x2, 0x0, 0x0, 0x4000}, 0x4000481)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0x7, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:48:37 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2916.852442] loop3: detected capacity change from 0 to 40
[ 2916.873479] loop2: detected capacity change from 0 to 40
[ 2916.891545] loop1: detected capacity change from 0 to 40
[ 2916.896171] FAT-fs (loop1): bogus number of reserved sectors
[ 2916.896804] FAT-fs (loop1): Can't find a valid FAT filesystem
21:48:51 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:48:51 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 46)

21:48:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 46)

[ 2930.255188] loop7: detected capacity change from 0 to 40
21:48:51 executing program 2:
syz_mount_image$vfat(&(0x7f00000013c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="88000000646f7366d8a0cc3b080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
lsetxattr$trusted_overlay_opaque(&(0x7f0000001300)='./file2/file0\x00', &(0x7f0000001340), &(0x7f0000001380), 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)=""/4096)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9001, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x1)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:48:51 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2930.267100] loop5: detected capacity change from 0 to 40
21:48:51 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:48:51 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33)

21:48:51 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2930.277422] loop1: detected capacity change from 0 to 40
[ 2930.279507] loop0: detected capacity change from 0 to 40
[ 2930.286036] loop3: detected capacity change from 0 to 40
[ 2930.286071] loop6: detected capacity change from 0 to 40
[ 2930.288397] FAT-fs (loop7): bogus number of reserved sectors
[ 2930.288863] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2930.292352] FAT-fs (loop1): bogus number of reserved sectors
[ 2930.292804] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2930.326085] loop4: detected capacity change from 0 to 40
[ 2930.331516] loop2: detected capacity change from 0 to 40
[ 2930.333346] FAT-fs (loop2): bogus logical sector size 2107
[ 2930.333869] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2930.521803] bio_check_eod: 5 callbacks suppressed
[ 2930.521831] syz-executor.5: attempt to access beyond end of device
[ 2930.521831] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2930.525443] buffer_io_error: 5 callbacks suppressed
[ 2930.525540] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2930.609826] syz-executor.6: attempt to access beyond end of device
[ 2930.609826] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2930.611417] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:48:51 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34)

[ 2930.664677] syz-executor.4: attempt to access beyond end of device
[ 2930.664677] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2930.665800] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2930.681528] syz-executor.3: attempt to access beyond end of device
[ 2930.681528] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2930.682902] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2930.730629] syz-executor.0: attempt to access beyond end of device
[ 2930.730629] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2930.731912] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:48:51 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2930.806107] loop6: detected capacity change from 0 to 40
21:48:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47)

[ 2930.862812] loop5: detected capacity change from 0 to 40
[ 2930.914852] loop4: detected capacity change from 0 to 40
[ 2931.095508] syz-executor.6: attempt to access beyond end of device
[ 2931.095508] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2931.096641] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2931.135018] syz-executor.5: attempt to access beyond end of device
[ 2931.135018] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2931.136099] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2931.137847] FAULT_INJECTION: forcing a failure.
[ 2931.137847] name failslab, interval 1, probability 0, space 0, times 0
[ 2931.140016] CPU: 1 PID: 12063 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2931.141042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2931.142095] Call Trace:
[ 2931.142436]  <TASK>
[ 2931.142740]  dump_stack_lvl+0x8f/0xb7
[ 2931.143257]  should_fail_ex.cold+0x5/0xa
[ 2931.143810]  should_failslab+0x9/0x20
[ 2931.144317]  __kmem_cache_alloc_node+0x5b/0x400
[ 2931.144920]  ? iter_file_splice_write+0x169/0xcb0
[ 2931.145584]  ? iter_file_splice_write+0x169/0xcb0
[ 2931.146225]  __kmalloc+0x46/0xc0
[ 2931.146690]  iter_file_splice_write+0x169/0xcb0
[ 2931.147299]  ? generic_file_read_iter+0x330/0x550
[ 2931.147932]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2931.148635]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2931.149260]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2931.149928]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2931.150646]  ? security_file_permission+0xb5/0xe0
[ 2931.151469]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2931.152382]  direct_splice_actor+0x113/0x180
[ 2931.153156]  splice_direct_to_actor+0x33a/0x8c0
[ 2931.154002]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2931.154831]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2931.155691]  ? security_file_permission+0xb5/0xe0
[ 2931.156312]  do_splice_direct+0x1bc/0x290
[ 2931.157008]  ? __pfx_do_splice_direct+0x10/0x10
[ 2931.157858]  ? lock_is_held_type+0xdb/0x130
[ 2931.158601]  do_sendfile+0xb1d/0x1280
[ 2931.159295]  ? __pfx_do_sendfile+0x10/0x10
[ 2931.160051]  __x64_sys_sendfile64+0x248/0x2a0
[ 2931.160817]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2931.161672]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2931.162511]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2931.163393]  do_syscall_64+0x3f/0x90
[ 2931.164028]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2931.164912] RIP: 0033:0x7f706eb8fb19
[ 2931.165580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2931.168502] RSP: 002b:00007f706c105188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2931.169765] RAX: ffffffffffffffda RBX: 00007f706eca2f60 RCX: 00007f706eb8fb19
[ 2931.170956] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2931.172107] RBP: 00007f706c1051d0 R08: 0000000000000000 R09: 0000000000000000
[ 2931.173338] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2931.174488] R13: 00007ffea5f8199f R14: 00007f706c105300 R15: 0000000000022000
[ 2931.175706]  </TASK>
[ 2931.193939] loop2: detected capacity change from 0 to 40
[ 2931.201275] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value
21:49:06 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35)

21:49:06 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockname$inet(r3, 0x0, &(0x7f00000000c0))
ioctl$FICLONE(r3, 0x40049409, r0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:49:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48)

21:49:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:49:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2945.596471] loop5: detected capacity change from 0 to 40
[ 2945.607603] loop6: detected capacity change from 0 to 40
21:49:06 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:49:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47)

21:49:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2945.610980] loop7: detected capacity change from 0 to 40
[ 2945.613024] loop2: detected capacity change from 0 to 40
[ 2945.613041] loop4: detected capacity change from 0 to 40
[ 2945.620658] loop3: detected capacity change from 0 to 40
[ 2945.634684] FAT-fs (loop7): bogus number of reserved sectors
[ 2945.635524] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2945.663404] loop1: detected capacity change from 0 to 40
[ 2945.670450] loop0: detected capacity change from 0 to 40
[ 2945.676579] syz-executor.3: attempt to access beyond end of device
[ 2945.676579] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2945.677570] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2945.684513] FAT-fs (loop1): bogus number of reserved sectors
[ 2945.685404] FAT-fs (loop1): Can't find a valid FAT filesystem
21:49:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2945.764460] syz-executor.5: attempt to access beyond end of device
[ 2945.764460] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2945.765601] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2945.778684] syz-executor.2: attempt to access beyond end of device
[ 2945.778684] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2945.779910] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:49:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2945.873621] FAULT_INJECTION: forcing a failure.
[ 2945.873621] name failslab, interval 1, probability 0, space 0, times 0
[ 2945.875734] CPU: 1 PID: 12090 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2945.876767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2945.877796] Call Trace:
[ 2945.878133]  <TASK>
[ 2945.878443]  dump_stack_lvl+0x8f/0xb7
[ 2945.878959]  should_fail_ex.cold+0x5/0xa
[ 2945.879522]  should_failslab+0x9/0x20
[ 2945.880044]  __kmem_cache_alloc_node+0x5b/0x400
[ 2945.880664]  ? iter_file_splice_write+0x169/0xcb0
21:49:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2945.881312]  ? iter_file_splice_write+0x169/0xcb0
[ 2945.882089]  __kmalloc+0x46/0xc0
[ 2945.882563]  iter_file_splice_write+0x169/0xcb0
[ 2945.883175]  ? generic_file_read_iter+0x330/0x550
[ 2945.883843]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2945.884509]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2945.885199]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2945.885929]  ? inode_security+0x105/0x140
[ 2945.886523]  ? security_file_permission+0xb5/0xe0
[ 2945.887181]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2945.887882]  direct_splice_actor+0x113/0x180
[ 2945.888480]  splice_direct_to_actor+0x33a/0x8c0
[ 2945.889106]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2945.889787]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2945.890479]  ? security_file_permission+0xb5/0xe0
[ 2945.890814] loop5: detected capacity change from 0 to 40
[ 2945.891143]  do_splice_direct+0x1bc/0x290
[ 2945.892106]  ? __pfx_do_splice_direct+0x10/0x10
[ 2945.892758]  ? lock_is_held_type+0xdb/0x130
[ 2945.893374]  do_sendfile+0xb1d/0x1280
[ 2945.893951]  ? __pfx_do_sendfile+0x10/0x10
[ 2945.894555]  __x64_sys_sendfile64+0x248/0x2a0
[ 2945.895176]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2945.895828]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2945.896514]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2945.897217]  do_syscall_64+0x3f/0x90
[ 2945.897746]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2945.898439] RIP: 0033:0x7fd263e4bb19
[ 2945.898942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2945.901256] RSP: 002b:00007fd2613c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2945.902256] RAX: ffffffffffffffda RBX: 00007fd263f5ef60 RCX: 00007fd263e4bb19
[ 2945.903190] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2945.904119] RBP: 00007fd2613c11d0 R08: 0000000000000000 R09: 0000000000000000
[ 2945.905044] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2945.905980] R13: 00007ffc9718118f R14: 00007fd2613c1300 R15: 0000000000022000
[ 2945.906942]  </TASK>
[ 2945.907823] loop2: detected capacity change from 0 to 40
[ 2945.948023] loop3: detected capacity change from 0 to 40
[ 2946.063495] syz-executor.2: attempt to access beyond end of device
[ 2946.063495] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2946.064851] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2946.078705] syz-executor.6: attempt to access beyond end of device
[ 2946.078705] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2946.080643] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:49:07 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e5c5c2c5d5b5e272a2f2c2b21472dad"], &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000240)='./file2/file0\x00', 0x200200, 0x100)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:49:07 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48)

[ 2946.137559] syz-executor.4: attempt to access beyond end of device
[ 2946.137559] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2946.139075] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2946.145031] syz-executor.3: attempt to access beyond end of device
[ 2946.145031] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2946.146542] Buffer I/O error on dev loop3, logical block 10, lost async page write
21:49:07 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36)

[ 2946.194094] syz-executor.5: attempt to access beyond end of device
[ 2946.194094] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2946.195758] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2946.199159] loop2: detected capacity change from 0 to 40
21:49:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49)

21:49:07 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2946.263561] loop0: detected capacity change from 0 to 40
[ 2946.263985] loop6: detected capacity change from 0 to 40
21:49:07 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2946.300721] loop5: detected capacity change from 0 to 40
[ 2946.318656] loop3: detected capacity change from 0 to 40
[ 2946.322417] FAULT_INJECTION: forcing a failure.
[ 2946.322417] name failslab, interval 1, probability 0, space 0, times 0
[ 2946.323421] CPU: 0 PID: 12109 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2946.324054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2946.324613] Call Trace:
[ 2946.324798]  <TASK>
[ 2946.324972]  dump_stack_lvl+0x8f/0xb7
[ 2946.325263]  should_fail_ex.cold+0x5/0xa
[ 2946.325596]  should_failslab+0x9/0x20
[ 2946.325891]  __kmem_cache_alloc_node+0x5b/0x400
[ 2946.326229]  ? iter_file_splice_write+0x169/0xcb0
[ 2946.326576]  ? iter_file_splice_write+0x169/0xcb0
[ 2946.326922]  __kmalloc+0x46/0xc0
[ 2946.327177]  iter_file_splice_write+0x169/0xcb0
[ 2946.327517]  ? generic_file_read_iter+0x330/0x550
[ 2946.327894]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2946.328270]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2946.328641]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2946.329038]  ? inode_security+0x105/0x140
[ 2946.329369]  ? security_file_permission+0xb5/0xe0
[ 2946.329742]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2946.330127]  direct_splice_actor+0x113/0x180
[ 2946.330459]  splice_direct_to_actor+0x33a/0x8c0
[ 2946.330809]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2946.331185]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2946.331572]  ? security_file_permission+0xb5/0xe0
[ 2946.331937]  do_splice_direct+0x1bc/0x290
[ 2946.332249]  ? __pfx_do_splice_direct+0x10/0x10
[ 2946.332606]  ? lock_is_held_type+0xdb/0x130
[ 2946.332941]  do_sendfile+0xb1d/0x1280
[ 2946.333253]  ? __pfx_do_sendfile+0x10/0x10
[ 2946.333615]  __x64_sys_sendfile64+0x248/0x2a0
[ 2946.333953]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2946.334317]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2946.334684]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2946.335059]  do_syscall_64+0x3f/0x90
[ 2946.335341]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2946.335718] RIP: 0033:0x7fd263e4bb19
[ 2946.335994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2946.337285] RSP: 002b:00007fd2613c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2946.337827] RAX: ffffffffffffffda RBX: 00007fd263f5ef60 RCX: 00007fd263e4bb19
[ 2946.338328] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2946.338820] RBP: 00007fd2613c11d0 R08: 0000000000000000 R09: 0000000000000000
[ 2946.339336] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2946.339845] R13: 00007ffc9718118f R14: 00007fd2613c1300 R15: 0000000000022000
[ 2946.340368]  </TASK>
[ 2946.352040] loop4: detected capacity change from 0 to 40
[ 2946.458291] syz-executor.3: attempt to access beyond end of device
[ 2946.458291] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2946.459389] Buffer I/O error on dev loop3, logical block 10, lost async page write
21:49:07 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2946.513366] syz-executor.2: attempt to access beyond end of device
[ 2946.513366] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2946.514980] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:49:07 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2946.563987] loop3: detected capacity change from 0 to 40
21:49:07 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:49:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50)

[ 2946.654718] loop7: detected capacity change from 0 to 40
[ 2946.668650] FAT-fs (loop7): bogus number of reserved sectors
[ 2946.669274] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2946.691171] loop1: detected capacity change from 0 to 40
[ 2946.695733] FAT-fs (loop1): invalid media value (0x00)
[ 2946.696111] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2946.700890] loop4: detected capacity change from 0 to 40
21:49:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:49:24 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:49:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockname$inet(r2, 0x0, &(0x7f00000000c0))
sendfile(r2, r1, &(0x7f0000000240)=0xffffffffffffffe0, 0x7fff)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:49:24 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37)

21:49:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:49:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:49:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51)

21:49:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49)

[ 2963.479238] loop2: detected capacity change from 0 to 40
[ 2963.487355] loop1: detected capacity change from 0 to 40
[ 2963.492020] loop7: detected capacity change from 0 to 40
[ 2963.501253] FAT-fs (loop7): bogus number of reserved sectors
[ 2963.501699] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2963.505809] FAT-fs (loop1): invalid media value (0x00)
[ 2963.506398] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2963.530104] loop0: detected capacity change from 0 to 40
[ 2963.553482] loop4: detected capacity change from 0 to 40
[ 2963.561837] loop5: detected capacity change from 0 to 40
[ 2963.564773] loop6: detected capacity change from 0 to 40
[ 2963.584313] loop3: detected capacity change from 0 to 40
[ 2963.908779] bio_check_eod: 5 callbacks suppressed
[ 2963.908806] syz-executor.2: attempt to access beyond end of device
[ 2963.908806] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2963.911541] buffer_io_error: 5 callbacks suppressed
[ 2963.911558] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2963.926969] syz-executor.3: attempt to access beyond end of device
[ 2963.926969] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2963.928630] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2963.933710] syz-executor.0: attempt to access beyond end of device
[ 2963.933710] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2963.935585] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2964.013850] syz-executor.4: attempt to access beyond end of device
[ 2964.013850] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2964.016008] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2964.023594] syz-executor.6: attempt to access beyond end of device
[ 2964.023594] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2964.025913] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2964.117845] syz-executor.5: attempt to access beyond end of device
[ 2964.117845] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2964.120067] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:49:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:49:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50)

21:49:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8400, 0x80)
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="757376060000000000005e272a2f2c2b21472d00"], &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x15408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfff}, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2964.264843] loop0: detected capacity change from 0 to 40
[ 2964.356377] loop3: detected capacity change from 0 to 40
[ 2964.366414] loop2: detected capacity change from 0 to 40
[ 2964.481316] syz-executor.2: attempt to access beyond end of device
[ 2964.481316] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2964.482928] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2964.512600] syz-executor.3: attempt to access beyond end of device
[ 2964.512600] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2964.514222] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2964.546650] syz-executor.0: attempt to access beyond end of device
[ 2964.546650] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2964.548680] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:49:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51)

21:49:40 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x2000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x2000}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(r0, &(0x7f0000000300)='./file1\x00', 0x28040, 0x100)
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r1)
openat(r4, &(0x7f0000000240)='./file1\x00', 0x20000, 0x82)
r5 = socket$inet(0x2, 0x6, 0x9)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000380)={0x1, @read_auth_payload_to={{0xc7b, 0x2}, {0xc8}}}, 0x6)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000340))
ioctl$CDROM_CHANGER_NSLOTS(r6, 0x5328)

21:49:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52)

21:49:40 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2979.696080] loop7: detected capacity change from 0 to 40
21:49:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38)

21:49:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:49:40 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:49:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2979.700608] loop3: detected capacity change from 0 to 40
[ 2979.704665] loop1: detected capacity change from 0 to 40
[ 2979.708751] FAT-fs (loop7): bogus number of reserved sectors
[ 2979.709271] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2979.709441] loop6: detected capacity change from 0 to 40
[ 2979.709766] FAT-fs (loop1): invalid media value (0x00)
[ 2979.710998] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2979.714533] loop4: detected capacity change from 0 to 40
[ 2979.757956] loop5: detected capacity change from 0 to 40
[ 2979.780872] loop2: detected capacity change from 0 to 264192
[ 2979.783590] loop0: detected capacity change from 0 to 40
[ 2979.787446] FAT-fs (loop2): bogus number of reserved sectors
[ 2979.787949] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2979.812201] syz-executor.3: attempt to access beyond end of device
[ 2979.812201] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2979.814088] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2979.840316] audit: type=1400 audit(1670449780.855:12): avc:  denied  { create } for  pid=12183 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1
21:49:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2980.111982] syz-executor.6: attempt to access beyond end of device
[ 2980.111982] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2980.114554] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2980.179782] syz-executor.5: attempt to access beyond end of device
[ 2980.179782] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2980.182415] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2980.234361] loop3: detected capacity change from 0 to 40
[ 2980.245993] syz-executor.0: attempt to access beyond end of device
[ 2980.245993] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2980.247931] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2980.287005] syz-executor.4: attempt to access beyond end of device
[ 2980.287005] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2980.289526] Buffer I/O error on dev loop4, logical block 10, lost async page write
21:49:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39)

21:49:41 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2980.512364] syz-executor.3: attempt to access beyond end of device
[ 2980.512364] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2980.514308] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2980.517577] loop6: detected capacity change from 0 to 40
21:49:41 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52)

21:49:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53)

[ 2980.635646] loop2: detected capacity change from 0 to 264192
[ 2980.647954] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value
[ 2980.691681] loop5: detected capacity change from 0 to 40
[ 2980.720961] FAULT_INJECTION: forcing a failure.
[ 2980.720961] name failslab, interval 1, probability 0, space 0, times 0
[ 2980.723145] CPU: 1 PID: 12200 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2980.724356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2980.725555] Call Trace:
[ 2980.725974]  <TASK>
[ 2980.726331]  dump_stack_lvl+0x8f/0xb7
[ 2980.726931]  should_fail_ex.cold+0x5/0xa
[ 2980.727574]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2980.728299]  should_failslab+0x9/0x20
[ 2980.728889]  kmem_cache_alloc+0x5a/0x410
[ 2980.729528]  fat_cache_add.part.0+0x5b4/0xb50
[ 2980.730261]  fat_get_cluster+0x922/0xd40
[ 2980.730912]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2980.731659]  fat_get_mapped_cluster+0x216/0x450
[ 2980.732382]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 2980.733171]  ? perf_swevent_event+0x6c/0x550
[ 2980.733879]  fat_bmap+0x1fc/0x460
[ 2980.734441]  fat_get_block+0x33e/0x930
[ 2980.735065]  ? __pfx_fat_get_block+0x10/0x10
[ 2980.735708]  ? lock_is_held_type+0xdb/0x130
[ 2980.736399]  __block_write_begin_int+0x380/0x13d0
[ 2980.737155]  ? __pfx_fat_get_block+0x10/0x10
[ 2980.737849]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2980.738689]  ? PageHeadHuge+0x169/0x1b0
[ 2980.739325]  ? __pfx_fat_get_block+0x10/0x10
[ 2980.740023]  block_write_begin+0xb9/0x450
[ 2980.740678]  cont_write_begin+0x4fe/0x700
[ 2980.741338]  ? lock_is_held_type+0xdb/0x130
[ 2980.742028]  ? __pfx_fat_get_block+0x10/0x10
[ 2980.742721]  ? __pfx_cont_write_begin+0x10/0x10
[ 2980.743439]  ? lock_release+0x3b6/0x750
[ 2980.744070]  ? __mark_inode_dirty+0x5a6/0xe70
[ 2980.744797]  ? mark_held_locks+0x9e/0xe0
[ 2980.745452]  fat_write_begin+0x89/0x180
[ 2980.746086]  ? __pfx_fat_get_block+0x10/0x10
[ 2980.746774]  generic_perform_write+0x25a/0x580
[ 2980.747495]  ? __pfx_generic_perform_write+0x10/0x10
[ 2980.748272]  ? __pfx_fat_update_time+0x10/0x10
[ 2980.748987]  ? __pfx_file_update_time+0x10/0x10
[ 2980.749729]  ? generic_write_checks+0x2c0/0x400
[ 2980.750398]  __generic_file_write_iter+0x308/0x4b0
[ 2980.751128]  ? do_sendfile+0xb1d/0x1280
[ 2980.751773]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 2980.752499]  generic_file_write_iter+0xe7/0x350
[ 2980.753248]  do_iter_readv_writev+0x211/0x3c0
[ 2980.753966]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2980.754870]  ? avc_policy_seqno+0xd/0x70
[ 2980.755518]  ? security_file_permission+0xb5/0xe0
[ 2980.756401]  do_iter_write+0x18b/0x700
[ 2980.757097]  ? lock_is_held_type+0xdb/0x130
[ 2980.757922]  vfs_iter_write+0x74/0xb0
[ 2980.758604]  iter_file_splice_write+0x73e/0xcb0
[ 2980.759362]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2980.760201]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2980.761080]  ? write_comp_data+0x21/0x90
[ 2980.761849]  ? security_file_permission+0xb5/0xe0
[ 2980.762703]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2980.763711]  direct_splice_actor+0x113/0x180
[ 2980.764414]  splice_direct_to_actor+0x33a/0x8c0
[ 2980.765243]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2980.766016]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2980.766840]  ? security_file_permission+0xb5/0xe0
[ 2980.767691]  do_splice_direct+0x1bc/0x290
[ 2980.768326]  ? __pfx_do_splice_direct+0x10/0x10
[ 2980.769251]  ? lock_is_held_type+0xdb/0x130
[ 2980.770022]  do_sendfile+0xb1d/0x1280
[ 2980.770647]  ? __pfx_do_sendfile+0x10/0x10
[ 2980.771333]  __x64_sys_sendfile64+0x248/0x2a0
[ 2980.772026]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2980.772770]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2980.773530]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2980.774313]  do_syscall_64+0x3f/0x90
[ 2980.774883]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2980.775645] RIP: 0033:0x7fd650a71b19
[ 2980.776347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2980.778942] RSP: 002b:00007fd64dfe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2980.780132] RAX: ffffffffffffffda RBX: 00007fd650b84f60 RCX: 00007fd650a71b19
[ 2980.781195] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2980.782215] RBP: 00007fd64dfe71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2980.783362] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2980.784570] R13: 00007fffca9186df R14: 00007fd64dfe7300 R15: 0000000000022000
[ 2980.785620]  </TASK>
21:49:41 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:49:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:49:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 2980.915254] loop1: detected capacity change from 0 to 40
[ 2980.916360] loop0: detected capacity change from 0 to 40
[ 2980.934539] FAT-fs (loop1): invalid media value (0x00)
[ 2980.935325] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2980.980220] loop4: detected capacity change from 0 to 40
[ 2981.028997] loop3: detected capacity change from 0 to 40
[ 2981.099674] syz-executor.6: attempt to access beyond end of device
[ 2981.099674] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2981.101555] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2981.122380] loop7: detected capacity change from 0 to 40
21:49:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e5c5c2c5d5bde272a2f2c2b21472d00"], &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2981.176260] FAT-fs (loop7): bogus number of reserved sectors
[ 2981.177013] FAT-fs (loop7): Can't find a valid FAT filesystem
21:49:42 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 40)

[ 2981.215502] syz-executor.3: attempt to access beyond end of device
[ 2981.215502] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2981.217537] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 2981.232745] syz-executor.5: attempt to access beyond end of device
[ 2981.232745] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2981.234489] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2981.273850] FAULT_INJECTION: forcing a failure.
[ 2981.273850] name failslab, interval 1, probability 0, space 0, times 0
[ 2981.275418] CPU: 1 PID: 12212 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2981.276210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2981.276999] Call Trace:
[ 2981.277261]  <TASK>
[ 2981.277496]  dump_stack_lvl+0x8f/0xb7
[ 2981.277896]  should_fail_ex.cold+0x5/0xa
[ 2981.278324]  should_failslab+0x9/0x20
[ 2981.278712]  __kmem_cache_alloc_node+0x5b/0x400
[ 2981.279178]  ? iter_file_splice_write+0x169/0xcb0
[ 2981.279666]  ? iter_file_splice_write+0x169/0xcb0
[ 2981.280149]  __kmalloc+0x46/0xc0
[ 2981.280510]  iter_file_splice_write+0x169/0xcb0
[ 2981.280972]  ? generic_file_read_iter+0x330/0x550
[ 2981.281476]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2981.281994]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2981.282505]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2981.283033]  ? inode_security+0x105/0x140
[ 2981.283478]  ? security_file_permission+0xb5/0xe0
[ 2981.283964]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2981.284480]  direct_splice_actor+0x113/0x180
[ 2981.284934]  splice_direct_to_actor+0x33a/0x8c0
[ 2981.285404]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2981.285908]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2981.286422]  ? security_file_permission+0xb5/0xe0
[ 2981.286910]  do_splice_direct+0x1bc/0x290
[ 2981.287332]  ? __pfx_do_splice_direct+0x10/0x10
[ 2981.287803]  ? lock_is_held_type+0xdb/0x130
[ 2981.288255]  do_sendfile+0xb1d/0x1280
[ 2981.288670]  ? __pfx_do_sendfile+0x10/0x10
[ 2981.289123]  __x64_sys_sendfile64+0x248/0x2a0
[ 2981.289578]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2981.290084]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2981.290594]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2981.291116]  do_syscall_64+0x3f/0x90
[ 2981.291507]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2981.292023] RIP: 0033:0x7f706eb8fb19
[ 2981.292396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2981.294137] RSP: 002b:00007f706c105188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2981.294886] RAX: ffffffffffffffda RBX: 00007f706eca2f60 RCX: 00007f706eb8fb19
[ 2981.295589] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2981.296278] RBP: 00007f706c1051d0 R08: 0000000000000000 R09: 0000000000000000
[ 2981.296960] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2981.297653] R13: 00007ffea5f8199f R14: 00007f706c105300 R15: 0000000000022000
[ 2981.298375]  </TASK>
21:49:42 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2981.322783] loop2: detected capacity change from 0 to 40
[ 2981.423534] loop6: detected capacity change from 0 to 40
[ 2981.429765] syz-executor.0: attempt to access beyond end of device
[ 2981.429765] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2981.431498] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2981.537718] loop3: detected capacity change from 0 to 40
[ 2981.631418] FAULT_INJECTION: forcing a failure.
[ 2981.631418] name failslab, interval 1, probability 0, space 0, times 0
[ 2981.633814] CPU: 0 PID: 12222 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2981.634894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2981.635953] Call Trace:
[ 2981.636319]  <TASK>
[ 2981.636627]  dump_stack_lvl+0x8f/0xb7
[ 2981.637160]  should_fail_ex.cold+0x5/0xa
[ 2981.637715]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2981.638540]  should_failslab+0x9/0x20
[ 2981.639246]  kmem_cache_alloc+0x5a/0x410
[ 2981.639995]  fat_cache_add.part.0+0x5b4/0xb50
[ 2981.640853]  fat_get_cluster+0x922/0xd40
[ 2981.641616]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2981.642503]  ? mark_held_locks+0x9e/0xe0
[ 2981.643250]  fat_get_mapped_cluster+0x216/0x450
[ 2981.644103]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 2981.645030]  ? fat_bmap+0x296/0x460
[ 2981.645719]  fat_bmap+0x1fc/0x460
[ 2981.646397]  fat_get_block+0x33e/0x930
[ 2981.647126]  ? __pfx_fat_get_block+0x10/0x10
[ 2981.647903]  ? lock_is_held_type+0xdb/0x130
[ 2981.648735]  __block_write_begin_int+0x380/0x13d0
[ 2981.649591]  ? __pfx_fat_get_block+0x10/0x10
[ 2981.650418]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2981.651328]  ? PageHeadHuge+0x169/0x1b0
[ 2981.652067]  ? __pfx_fat_get_block+0x10/0x10
[ 2981.652845]  block_write_begin+0xb9/0x450
[ 2981.653593]  cont_write_begin+0x4fe/0x700
[ 2981.654366]  ? lock_is_held_type+0xdb/0x130
[ 2981.655152]  ? __pfx_fat_get_block+0x10/0x10
[ 2981.655921]  ? __pfx_cont_write_begin+0x10/0x10
[ 2981.656728]  ? lock_release+0x3b6/0x750
[ 2981.657447]  ? __mark_inode_dirty+0x5a6/0xe70
[ 2981.658278]  ? mark_held_locks+0x9e/0xe0
[ 2981.659009]  fat_write_begin+0x89/0x180
[ 2981.659706]  ? __pfx_fat_get_block+0x10/0x10
[ 2981.660487]  generic_perform_write+0x25a/0x580
[ 2981.661317]  ? __pfx_generic_perform_write+0x10/0x10
[ 2981.662220]  ? __pfx_fat_update_time+0x10/0x10
[ 2981.663024]  ? __pfx_file_update_time+0x10/0x10
[ 2981.663855]  ? generic_write_checks+0x2c0/0x400
[ 2981.664680]  __generic_file_write_iter+0x308/0x4b0
[ 2981.665539]  ? do_sendfile+0xb1d/0x1280
[ 2981.666277]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 2981.667103]  generic_file_write_iter+0xe7/0x350
[ 2981.667953]  do_iter_readv_writev+0x211/0x3c0
[ 2981.668762]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2981.669637]  ? avc_policy_seqno+0xd/0x70
[ 2981.670285]  ? security_file_permission+0xb5/0xe0
[ 2981.670937]  do_iter_write+0x18b/0x700
[ 2981.671477]  ? lock_is_held_type+0xdb/0x130
[ 2981.672070]  vfs_iter_write+0x74/0xb0
[ 2981.672606]  iter_file_splice_write+0x73e/0xcb0
[ 2981.673402]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2981.674101]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2981.674805]  ? inode_security+0x105/0x140
[ 2981.675394]  ? security_file_permission+0xb5/0xe0
[ 2981.676046]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2981.676731]  direct_splice_actor+0x113/0x180
[ 2981.677303]  splice_direct_to_actor+0x33a/0x8c0
[ 2981.677947]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2981.678608]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2981.679288]  ? security_file_permission+0xb5/0xe0
[ 2981.679955]  do_splice_direct+0x1bc/0x290
[ 2981.680511]  ? __pfx_do_splice_direct+0x10/0x10
[ 2981.681153]  ? lock_is_held_type+0xdb/0x130
[ 2981.681761]  do_sendfile+0xb1d/0x1280
[ 2981.682310]  ? __pfx_do_sendfile+0x10/0x10
[ 2981.682903]  __x64_sys_sendfile64+0x248/0x2a0
[ 2981.683500]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2981.684162]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2981.684830]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2981.685524]  do_syscall_64+0x3f/0x90
[ 2981.686055]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2981.686740] RIP: 0033:0x7fd650a71b19
[ 2981.687240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2981.689524] RSP: 002b:00007fd64dfe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2981.690497] RAX: ffffffffffffffda RBX: 00007fd650b84f60 RCX: 00007fd650a71b19
[ 2981.691415] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2981.692333] RBP: 00007fd64dfe71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2981.693248] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2981.694170] R13: 00007fffca9186df R14: 00007fd64dfe7300 R15: 0000000000022000
[ 2981.695110]  </TASK>
21:50:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54)

[ 2999.349545] loop0: detected capacity change from 0 to 40
21:50:00 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53)

21:50:00 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:50:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 41)

21:50:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:50:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="042842d4d4b5602508df755d7451a86e41ba60b32eea57975d4f67ad17bd7bdfbcf6281f5ec8af9c5c26cb5377edf1438d27fdafc6cfde4dbbf439318170362d1c69923a94749cd58d2fe41a2956f630f20a0b7ba120c0c91ee8", @ANYRESHEX=r2, @ANYBLOB="ee829ec263f869d6f79bbb861073a18fc3bcf2a0815aec", @ANYBLOB="835f2c74733ef19049ea66197b7d3b8782c7", @ANYRES16=r0, @ANYRES32, @ANYRESHEX], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:50:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:50:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2999.365415] loop3: detected capacity change from 0 to 40
[ 2999.372871] loop5: detected capacity change from 0 to 40
[ 2999.405407] loop6: detected capacity change from 0 to 40
[ 2999.406408] loop7: detected capacity change from 0 to 40
[ 2999.418911] loop4: detected capacity change from 0 to 40
[ 2999.424253] FAT-fs (loop7): bogus number of reserved sectors
[ 2999.424882] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2999.433941] loop1: detected capacity change from 0 to 40
[ 2999.438179] loop2: detected capacity change from 0 to 40
[ 2999.451961] FAT-fs (loop1): invalid media value (0x00)
[ 2999.452915] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2999.477608] FAULT_INJECTION: forcing a failure.
[ 2999.477608] name failslab, interval 1, probability 0, space 0, times 0
[ 2999.478957] CPU: 1 PID: 12238 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221207 #1
[ 2999.479739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2999.480510] Call Trace:
[ 2999.480763]  <TASK>
[ 2999.480990]  dump_stack_lvl+0x8f/0xb7
[ 2999.481375]  should_fail_ex.cold+0x5/0xa
[ 2999.481797]  should_failslab+0x9/0x20
[ 2999.482191]  __kmem_cache_alloc_node+0x5b/0x400
[ 2999.482651]  ? iter_file_splice_write+0x169/0xcb0
[ 2999.483131]  ? iter_file_splice_write+0x169/0xcb0
[ 2999.483604]  __kmalloc+0x46/0xc0
[ 2999.483956]  iter_file_splice_write+0x169/0xcb0
[ 2999.484416]  ? generic_file_read_iter+0x330/0x550
[ 2999.484915]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2999.485409]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2999.485911]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2999.486444]  ? inode_security+0x105/0x140
[ 2999.486870]  ? security_file_permission+0xb5/0xe0
[ 2999.487358]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2999.487864]  direct_splice_actor+0x113/0x180
[ 2999.488299]  splice_direct_to_actor+0x33a/0x8c0
[ 2999.488753]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2999.489233]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2999.489726]  ? security_file_permission+0xb5/0xe0
[ 2999.490209]  do_splice_direct+0x1bc/0x290
[ 2999.490620]  ? __pfx_do_splice_direct+0x10/0x10
[ 2999.491086]  ? lock_is_held_type+0xdb/0x130
[ 2999.491525]  do_sendfile+0xb1d/0x1280
[ 2999.491924]  ? __pfx_do_sendfile+0x10/0x10
[ 2999.492368]  __x64_sys_sendfile64+0x248/0x2a0
[ 2999.492807]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2999.493288]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2999.493780]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2999.494293]  do_syscall_64+0x3f/0x90
[ 2999.494666]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2999.495160] RIP: 0033:0x7fd263e4bb19
[ 2999.495519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2999.497191] RSP: 002b:00007fd2613c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2999.497897] RAX: ffffffffffffffda RBX: 00007fd263f5ef60 RCX: 00007fd263e4bb19
[ 2999.498573] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2999.499234] RBP: 00007fd2613c11d0 R08: 0000000000000000 R09: 0000000000000000
[ 2999.499900] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2999.500567] R13: 00007ffc9718118f R14: 00007fd2613c1300 R15: 0000000000022000
[ 2999.501250]  </TASK>
[ 2999.527351] bio_check_eod: 3 callbacks suppressed
[ 2999.527367] syz-executor.3: attempt to access beyond end of device
[ 2999.527367] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2999.529152] buffer_io_error: 3 callbacks suppressed
[ 2999.529165] Buffer I/O error on dev loop3, logical block 10, lost async page write
21:50:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:50:00 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54)

[ 2999.706371] syz-executor.5: attempt to access beyond end of device
[ 2999.706371] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2999.707513] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2999.753804] syz-executor.6: attempt to access beyond end of device
[ 2999.753804] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2999.755430] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2999.756681] loop3: detected capacity change from 0 to 40
[ 2999.796366] syz-executor.4: attempt to access beyond end of device
[ 2999.796366] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2999.797723] Buffer I/O error on dev loop4, logical block 10, lost async page write
21:50:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2999.831794] loop0: detected capacity change from 0 to 40
[ 2999.833927] syz-executor.2: attempt to access beyond end of device
[ 2999.833927] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2999.835084] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:50:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55)

[ 2999.890288] syz-executor.3: attempt to access beyond end of device
[ 2999.890288] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2999.892583] Buffer I/O error on dev loop3, logical block 10, lost async page write
21:50:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 42)

[ 2999.927524] loop5: detected capacity change from 0 to 40
[ 2999.950382] loop6: detected capacity change from 0 to 40
21:50:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2999.968637] loop4: detected capacity change from 0 to 40
21:50:01 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(r0, &(0x7f0000000240)='./file1\x00', 0x80, 0xd1)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3000.081033] loop3: detected capacity change from 0 to 40
[ 3000.117916] loop2: detected capacity change from 0 to 40
[ 3000.144013] syz-executor.0: attempt to access beyond end of device
[ 3000.144013] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3000.145321] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3000.179465] syz-executor.5: attempt to access beyond end of device
[ 3000.179465] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3000.180541] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3000.248411] syz-executor.3: attempt to access beyond end of device
[ 3000.248411] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3000.250171] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3000.343805] syz-executor.4: attempt to access beyond end of device
[ 3000.343805] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3000.345732] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3013.879919] loop6: detected capacity change from 0 to 40
[ 3013.881622] loop4: detected capacity change from 0 to 40
21:50:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55)

21:50:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:50:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = dup2(r2, r3)
setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000240)=0x1f, 0x4)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:50:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 43)

21:50:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:50:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

21:50:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 56)

21:50:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3013.898846] loop1: detected capacity change from 0 to 40
[ 3013.907961] loop7: detected capacity change from 0 to 40
[ 3013.929151] loop5: detected capacity change from 0 to 40
[ 3013.934559] FAT-fs (loop7): bogus number of reserved sectors
[ 3013.935714] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3013.943400] FAT-fs (loop1): invalid media value (0x00)
[ 3013.944444] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 3013.962002] loop0: detected capacity change from 0 to 40
[ 3013.972495] loop3: detected capacity change from 0 to 40
[ 3013.982580] loop2: detected capacity change from 0 to 40
[ 3014.014042] bio_check_eod: 3 callbacks suppressed
[ 3014.014055] syz-executor.4: attempt to access beyond end of device
[ 3014.014055] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3014.016040] buffer_io_error: 3 callbacks suppressed
[ 3014.016050] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3014.035013] syz-executor.6: attempt to access beyond end of device
[ 3014.035013] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3014.036436] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:50:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 57)

[ 3014.150297] syz-executor.2: attempt to access beyond end of device
[ 3014.150297] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3014.151442] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3014.154891] syz-executor.5: attempt to access beyond end of device
[ 3014.154891] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3014.156375] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:50:15 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 44)

21:50:15 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 3014.233437] loop4: detected capacity change from 0 to 40
21:50:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3014.287485] loop3: detected capacity change from 0 to 40
[ 3014.303558] loop6: detected capacity change from 0 to 40
21:50:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e5c5c2c5d392a2f2c2b0600ad00"], &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0xa6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3014.373050] syz-executor.0: attempt to access beyond end of device
[ 3014.373050] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3014.375752] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3014.449907] loop5: detected capacity change from 0 to 40
[ 3014.473062] loop2: detected capacity change from 0 to 40
[ 3014.583813] syz-executor.2: attempt to access beyond end of device
[ 3014.583813] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3014.585715] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3014.691402] syz-executor.5: attempt to access beyond end of device
[ 3014.691402] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3014.693438] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3014.751760] syz-executor.4: attempt to access beyond end of device
[ 3014.751760] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3014.753725] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3014.832886] syz-executor.6: attempt to access beyond end of device
[ 3014.832886] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3014.834882] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:50:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

21:50:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:50:28 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = syz_io_uring_complete(0x0)
execveat(r1, &(0x7f0000000240)='./file1\x00', &(0x7f00000003c0)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='\\\\,][^\'*/,+!G-\x00', &(0x7f0000000380)='&*\x00'], &(0x7f00000004c0)=[&(0x7f0000000400)='*\x00', &(0x7f0000000440)='\'\x00', &(0x7f0000000480)='\x00'], 0x800)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x20}, 0xc12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

21:50:28 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 45)

21:50:28 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 56)

21:50:28 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3027.593335] loop0: detected capacity change from 0 to 40
21:50:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:50:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 58)

[ 3027.629470] loop7: detected capacity change from 0 to 40
[ 3027.635223] FAT-fs (loop7): bogus number of reserved sectors
[ 3027.635650] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3027.638679] loop2: detected capacity change from 0 to 40
[ 3027.656099] loop5: detected capacity change from 0 to 40
[ 3027.691534] loop4: detected capacity change from 0 to 40
[ 3027.695789] loop3: detected capacity change from 0 to 40
[ 3027.697025] loop1: detected capacity change from 0 to 40
[ 3027.702977] loop6: detected capacity change from 0 to 40
[ 3027.714399] FAT-fs (loop1): bogus number of FAT sectors
[ 3027.715188] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 3027.739972] syz-executor.5: attempt to access beyond end of device
[ 3027.739972] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3027.740893] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3027.755896] syz-executor.0: attempt to access beyond end of device
[ 3027.755896] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3027.756994] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:50:28 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 57)

[ 3027.862395] loop0: detected capacity change from 0 to 40
21:50:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3027.995555] syz-executor.0: attempt to access beyond end of device
[ 3027.995555] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3027.996733] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3028.034744] syz-executor.2: attempt to access beyond end of device
[ 3028.034744] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3028.036097] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:50:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 58)

21:50:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 3028.129930] loop0: detected capacity change from 0 to 40
[ 3028.286785] loop5: detected capacity change from 0 to 40
[ 3028.297614] syz-executor.0: attempt to access beyond end of device
[ 3028.297614] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3028.299260] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3028.354820] syz-executor.6: attempt to access beyond end of device
[ 3028.354820] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3028.356767] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:50:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='usZr.\\\\,][^\'*/,+!G-\x00'], &(0x7f00000001c0)=""/39, 0x27)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb158, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r0, {0xee01, 0xee01}}, './file0\x00'})
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x7, 0x30, 0x1, 0x7, 0x0, 0xffffffffffffffe1, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x2, 0x4}, 0x0, 0x6, 0x40, 0x9, 0x6, 0x3, 0x6, 0x0, 0xffff, 0x0, 0xffffffffffffffc3}, 0x0, 0x4, r4, 0x8)
sendfile(r2, r1, 0x0, 0xfffffdef)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='projid_map\x00')
sendfile(r3, r5, &(0x7f0000000300)=0xcc, 0x24)

[ 3028.408048] loop3: detected capacity change from 0 to 40
[ 3028.439826] syz-executor.4: attempt to access beyond end of device
[ 3028.439826] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3028.441858] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3028.480782] loop2: detected capacity change from 0 to 40
21:50:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 59)

[ 3028.541427] syz-executor.5: attempt to access beyond end of device
[ 3028.541427] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3028.543263] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3028.598511] syz-executor.2: attempt to access beyond end of device
[ 3028.598511] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3028.600372] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3028.644511] syz-executor.2: attempt to access beyond end of device
[ 3028.644511] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3028.646020] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:50:29 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 46)

21:50:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 59)

21:50:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

21:50:29 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3028.727399] loop0: detected capacity change from 0 to 40
21:50:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:50:29 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3028.772093] loop6: detected capacity change from 0 to 40
21:50:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
open(&(0x7f0000000240)='./file2\x00', 0xa02c0, 0x84)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x800, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x53, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3028.829227] loop3: detected capacity change from 0 to 40
[ 3028.830306] loop4: detected capacity change from 0 to 40
[ 3028.834024] loop7: detected capacity change from 0 to 40
[ 3028.843360] FAT-fs (loop7): bogus number of reserved sectors
[ 3028.843802] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3028.849816] loop1: detected capacity change from 0 to 40
[ 3028.864153] FAT-fs (loop1): bogus number of FAT sectors
[ 3028.864591] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 3028.895209] loop2: detected capacity change from 0 to 40
[ 3028.897221] loop5: detected capacity change from 0 to 40
21:50:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 3029.150890] loop3: detected capacity change from 0 to 40
[ 3041.595944] loop6: detected capacity change from 0 to 40
21:50:42 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 60)

21:50:42 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:50:42 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:50:42 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47)

21:50:42 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 60)

21:50:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x8, 0x2, 0x3, 0x1, 0x0, 0x2, 0x30000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0x80}, 0x80000, 0x401, 0xcb0b, 0x6, 0x8001, 0xffffff80, 0x0, 0x0, 0xcb0f, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x8)
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x6, 0x5, 0x2, 0x40, 0x0, 0x5, 0x8, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x4215, 0x10001, 0x3f, 0x5, 0x8, 0xe827, 0x8000, 0x0, 0xffffff7f, 0x0, 0xffff}, 0x0, 0xd, r3, 0x6dbb3d2c7e373045)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:50:42 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:50:42 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

[ 3041.616919] loop3: detected capacity change from 0 to 40
[ 3041.620435] loop2: detected capacity change from 0 to 40
[ 3041.627580] loop0: detected capacity change from 0 to 40
[ 3041.645777] loop5: detected capacity change from 0 to 40
[ 3041.674259] FAULT_INJECTION: forcing a failure.
[ 3041.674259] name failslab, interval 1, probability 0, space 0, times 0
[ 3041.675436] CPU: 1 PID: 12384 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221207 #1
[ 3041.675997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3041.676576] Call Trace:
[ 3041.676766]  <TASK>
[ 3041.676931]  dump_stack_lvl+0x8f/0xb7
[ 3041.677225]  should_fail_ex.cold+0x5/0xa
[ 3041.677537]  should_failslab+0x9/0x20
[ 3041.677822]  __kmem_cache_alloc_node+0x5b/0x400
[ 3041.678163]  ? iter_file_splice_write+0x169/0xcb0
[ 3041.678520]  ? iter_file_splice_write+0x169/0xcb0
[ 3041.678880]  __kmalloc+0x46/0xc0
[ 3041.679136]  iter_file_splice_write+0x169/0xcb0
[ 3041.679347] loop1: detected capacity change from 0 to 40
[ 3041.679468]  ? perf_trace_preemptirq_template+0x272/0x410
[ 3041.680536]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 3041.680958]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3041.681337]  ? mark_held_locks+0x9e/0xe0
[ 3041.681640]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3041.682035]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3041.682283] loop7: detected capacity change from 0 to 40
[ 3041.682420]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3041.682446]  direct_splice_actor+0x113/0x180
[ 3041.683800]  splice_direct_to_actor+0x33a/0x8c0
[ 3041.684136]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3041.684495]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3041.684865]  ? security_file_permission+0xb5/0xe0
[ 3041.685223]  do_splice_direct+0x1bc/0x290
[ 3041.685520]  ? __pfx_do_splice_direct+0x10/0x10
[ 3041.685876]  ? lock_is_held_type+0xdb/0x130
[ 3041.686204]  do_sendfile+0xb1d/0x1280
[ 3041.686513]  ? __pfx_do_sendfile+0x10/0x10
[ 3041.686839]  __x64_sys_sendfile64+0x248/0x2a0
[ 3041.687165]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3041.687521]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3041.687883]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3041.688260]  do_syscall_64+0x3f/0x90
[ 3041.688539]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3041.688910] RIP: 0033:0x7fd650a71b19
[ 3041.688963] loop4: detected capacity change from 0 to 40
[ 3041.689174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3041.689191] RSP: 002b:00007fd64dfe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3041.691610] RAX: ffffffffffffffda RBX: 00007fd650b84f60 RCX: 00007fd650a71b19
[ 3041.692153] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 3041.692228] FAT-fs (loop1): bogus number of FAT sectors
[ 3041.692662] RBP: 00007fd64dfe71d0 R08: 0000000000000000 R09: 0000000000000000
[ 3041.692674] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 3041.692686] R13: 00007fffca9186df R14: 00007fd64dfe7300 R15: 0000000000022000
[ 3041.693388] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 3041.693858]  </TASK>
[ 3041.698769] FAT-fs (loop7): bogus number of reserved sectors
[ 3041.699608] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3041.892995] bio_check_eod: 5 callbacks suppressed
[ 3041.893019] syz-executor.2: attempt to access beyond end of device
[ 3041.893019] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3041.896215] buffer_io_error: 5 callbacks suppressed
[ 3041.896252] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3041.952400] syz-executor.5: attempt to access beyond end of device
[ 3041.952400] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3041.954376] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3041.975107] syz-executor.2: attempt to access beyond end of device
[ 3041.975107] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3041.977993] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3042.065807] syz-executor.0: attempt to access beyond end of device
[ 3042.065807] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3042.067397] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3042.170591] syz-executor.4: attempt to access beyond end of device
[ 3042.170591] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3042.172686] Buffer I/O error on dev loop4, logical block 10, lost async page write
21:50:55 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3054.879096] loop7: detected capacity change from 0 to 40
[ 3054.881746] loop1: detected capacity change from 0 to 40
21:50:55 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48)

21:50:55 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:50:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:50:55 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(r0, &(0x7f0000000240)='./file1\x00', 0xc94b9bbaf4303af, 0x22)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffeffffffff, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:50:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 61)

21:50:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 61)

21:50:55 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

[ 3054.887108] FAT-fs (loop7): invalid media value (0x00)
[ 3054.887552] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3054.890029] loop5: detected capacity change from 0 to 40
[ 3054.892758] loop4: detected capacity change from 0 to 40
[ 3054.907531] loop6: detected capacity change from 0 to 40
[ 3054.911003] loop3: detected capacity change from 0 to 40
[ 3054.919282] loop2: detected capacity change from 0 to 40
[ 3054.923255] loop0: detected capacity change from 0 to 40
[ 3055.048809] syz-executor.4: attempt to access beyond end of device
[ 3055.048809] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3055.049947] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3055.140120] syz-executor.5: attempt to access beyond end of device
[ 3055.140120] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3055.142092] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:50:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

21:50:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 62)

[ 3055.228031] loop3: detected capacity change from 0 to 40
21:50:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3055.332777] loop4: detected capacity change from 0 to 40
[ 3055.334641] syz-executor.2: attempt to access beyond end of device
[ 3055.334641] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3055.336763] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3055.343458] syz-executor.0: attempt to access beyond end of device
[ 3055.343458] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3055.344742] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3055.372686] loop5: detected capacity change from 0 to 40
21:50:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 62)

[ 3055.397537] syz-executor.6: attempt to access beyond end of device
[ 3055.397537] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3055.399751] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3055.456029] syz-executor.2: attempt to access beyond end of device
[ 3055.456029] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3055.457355] syz-executor.5: attempt to access beyond end of device
[ 3055.457355] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3055.457656] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3055.458471] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3055.507527] loop0: detected capacity change from 0 to 40
21:50:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49)

21:50:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:50:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockname$inet(r2, 0x0, &(0x7f00000000c0))
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYBLOB="1dd0cbca4525b3898f547ea12965555d32f60b73e9117f36042acfc695321f7ac541576f3c1bfddf176c194563aeec98f376305a77a9199e9e5aeab5abf8cb9dbca369cc5b115dff4090433bd319bca62b027408e0a94eea064f71bd10592c0c00544e2d5077bb7507e4169465a7c1839633b08b7a421ff9c83343e93cabffaa2c66cf0eb6ec4f6f9ae304b3ae5920393a3274770e7d6fbf08f63ffd6d762d1a37d7845b7ef026528b", @ANYBLOB="f090012942ab021e6dcb992683b56486f64c7643939115d808687a126901fda824281a945e2e8310115f3856efe762e873eac8ada071a9c85c18e32f0e43162255626b56f9dde0019309e6c8bd781af3252689b24548c8a82ee77c24efa990f69e3fe5befd4c33657db1b26c98ef7978fc50279f8a80eb9fec8f1424ae290bac33dca113a6c84f13e7f59c60675981a238579d199b17994d7b3b2e55442f2d78b17d6e35e649859c9867f4c98ed303deadd55cc3a2a875171ea95d69c4646bb2d8aacabb4362"], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x10)
renameat2(r1, &(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000340)='./file1\x00', 0x1)

[ 3055.642405] loop6: detected capacity change from 0 to 40
[ 3055.693896] loop5: detected capacity change from 0 to 40
[ 3055.716862] syz-executor.4: attempt to access beyond end of device
[ 3055.716862] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3055.718036] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3055.758915] loop2: detected capacity change from 0 to 40
[ 3055.783454] syz-executor.0: attempt to access beyond end of device
[ 3055.783454] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3055.784577] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3055.810211] syz-executor.5: attempt to access beyond end of device
[ 3055.810211] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3055.811069] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:50:56 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:50:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 63)

21:50:56 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:50:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 63)

[ 3055.927850] loop4: detected capacity change from 0 to 40
[ 3055.969798] loop0: detected capacity change from 0 to 40
[ 3055.995696] loop1: detected capacity change from 0 to 40
[ 3055.998736] loop3: detected capacity change from 0 to 40
21:50:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50)

[ 3056.023878] loop6: detected capacity change from 0 to 40
21:50:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:50:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:50:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x80082, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3056.041257] loop7: detected capacity change from 0 to 40
[ 3056.043518] FAT-fs (loop7): invalid media value (0x00)
[ 3056.043928] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3056.098709] loop5: detected capacity change from 0 to 40
[ 3056.103255] loop2: detected capacity change from 0 to 40
21:50:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 64)

21:50:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockname$inet(r2, 0x0, &(0x7f00000000c0))
write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYBLOB="1dd0cbca4525b3898f547ea12965555d32f60b73e9117f36042acfc695321f7ac541576f3c1bfddf176c194563aeec98f376305a77a9199e9e5aeab5abf8cb9dbca369cc5b115dff4090433bd319bca62b027408e0a94eea064f71bd10592c0c00544e2d5077bb7507e4169465a7c1839633b08b7a421ff9c83343e93cabffaa2c66cf0eb6ec4f6f9ae304b3ae5920393a3274770e7d6fbf08f63ffd6d762d1a37d7845b7ef026528b", @ANYBLOB="f090012942ab021e6dcb992683b56486f64c7643939115d808687a126901fda824281a945e2e8310115f3856efe762e873eac8ada071a9c85c18e32f0e43162255626b56f9dde0019309e6c8bd781af3252689b24548c8a82ee77c24efa990f69e3fe5befd4c33657db1b26c98ef7978fc50279f8a80eb9fec8f1424ae290bac33dca113a6c84f13e7f59c60675981a238579d199b17994d7b3b2e55442f2d78b17d6e35e649859c9867f4c98ed303deadd55cc3a2a875171ea95d69c4646bb2d8aacabb4362"], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x10)
renameat2(r1, &(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000340)='./file1\x00', 0x1)

21:50:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3056.355368] loop3: detected capacity change from 0 to 40
[ 3056.363487] loop5: detected capacity change from 0 to 40
21:50:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x48000, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3056.462545] loop4: detected capacity change from 0 to 40
21:50:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 64)

[ 3056.501450] loop2: detected capacity change from 0 to 40
21:50:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51)

[ 3056.708353] loop0: detected capacity change from 0 to 40
21:50:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x80082, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3056.904546] loop6: detected capacity change from 0 to 40
21:50:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 65)

[ 3056.978571] loop3: detected capacity change from 0 to 40
[ 3057.051446] loop4: detected capacity change from 0 to 40
21:51:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:51:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x80082, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:51:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 66)

[ 3069.778042] loop1: detected capacity change from 0 to 40
[ 3069.778217] loop5: detected capacity change from 0 to 40
21:51:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:51:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 65)

21:51:10 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52)

21:51:10 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3069.787966] loop3: detected capacity change from 0 to 40
21:51:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x80000, 0x10)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x0, 0x2, 0x3e, 0x3})
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340))
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockname$inet(r3, 0x0, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x4abf}}, './file1\x00'})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3069.796540] loop4: detected capacity change from 0 to 40
[ 3069.815840] loop2: detected capacity change from 0 to 40
[ 3069.821588] loop7: detected capacity change from 0 to 40
[ 3069.831826] FAT-fs (loop7): invalid media value (0x00)
[ 3069.832262] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3069.859262] loop6: detected capacity change from 0 to 40
[ 3069.868354] loop0: detected capacity change from 0 to 40
[ 3069.911746] bio_check_eod: 18 callbacks suppressed
[ 3069.911769] syz-executor.2: attempt to access beyond end of device
[ 3069.911769] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3069.914851] buffer_io_error: 17 callbacks suppressed
[ 3069.914894] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3070.011580] syz-executor.5: attempt to access beyond end of device
[ 3070.011580] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3070.012933] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3070.183569] syz-executor.3: attempt to access beyond end of device
[ 3070.183569] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3070.185642] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3070.231895] syz-executor.4: attempt to access beyond end of device
[ 3070.231895] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3070.232996] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3070.249470] FAULT_INJECTION: forcing a failure.
[ 3070.249470] name failslab, interval 1, probability 0, space 0, times 0
[ 3070.251445] CPU: 1 PID: 12507 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221207 #1
[ 3070.252422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3070.253401] Call Trace:
[ 3070.253751]  <TASK>
[ 3070.254041]  dump_stack_lvl+0x8f/0xb7
[ 3070.254533]  should_fail_ex.cold+0x5/0xa
[ 3070.255104]  should_failslab+0x9/0x20
[ 3070.255613]  __kmem_cache_alloc_node+0x5b/0x400
[ 3070.256191]  ? iter_file_splice_write+0x169/0xcb0
[ 3070.256835]  ? iter_file_splice_write+0x169/0xcb0
[ 3070.257436]  __kmalloc+0x46/0xc0
[ 3070.257904]  iter_file_splice_write+0x169/0xcb0
[ 3070.258703]  ? generic_file_read_iter+0x330/0x550
[ 3070.259636]  ? generic_file_splice_read+0x1bc/0x4d0
[ 3070.260541]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3070.261447]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 3070.262377]  ? inode_security+0x105/0x140
[ 3070.263135]  ? security_file_permission+0xb5/0xe0
[ 3070.263836]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3070.264512]  direct_splice_actor+0x113/0x180
[ 3070.265111]  splice_direct_to_actor+0x33a/0x8c0
[ 3070.265796]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3070.266450]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3070.267180]  ? security_file_permission+0xb5/0xe0
[ 3070.267858]  do_splice_direct+0x1bc/0x290
[ 3070.268450]  ? __pfx_do_splice_direct+0x10/0x10
[ 3070.269141]  ? lock_is_held_type+0xdb/0x130
[ 3070.269745]  do_sendfile+0xb1d/0x1280
[ 3070.270291]  ? __pfx_do_sendfile+0x10/0x10
[ 3070.270933]  __x64_sys_sendfile64+0x248/0x2a0
[ 3070.271571]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3070.272239]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3070.272938]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3070.273664]  do_syscall_64+0x3f/0x90
[ 3070.274162]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3070.274880] RIP: 0033:0x7fd263e4bb19
[ 3070.275414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3070.277883] RSP: 002b:00007fd2613c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3070.278877] RAX: ffffffffffffffda RBX: 00007fd263f5ef60 RCX: 00007fd263e4bb19
[ 3070.279922] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 3070.280902] RBP: 00007fd2613c11d0 R08: 0000000000000000 R09: 0000000000000000
[ 3070.281882] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 3070.282861] R13: 00007ffc9718118f R14: 00007fd2613c1300 R15: 0000000000022000
[ 3070.283902]  </TASK>
[ 3070.512671] syz-executor.6: attempt to access beyond end of device
[ 3070.512671] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3070.514892] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:51:28 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:51:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:51:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:51:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x80000, 0x10)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x0, 0x2, 0x3e, 0x3})
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340))
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockname$inet(r3, 0x0, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x4abf}}, './file1\x00'})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:51:28 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="757365722e5c5c2c5d5b5e272a2f2c2b21472d00f7e75aa8cd78dcdd64c6cc03546fdaddfbe801720813e80ac9be2fb7fedb1093e222da201c3da4fdce1c53f9dd3293f589753b4b3a9e11a974c60dac1bac228300187a860c9fddb18fc3"], &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:51:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 67)

21:51:28 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 66)

[ 3088.001317] loop1: detected capacity change from 0 to 40
[ 3088.010619] loop3: detected capacity change from 0 to 40
21:51:29 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53)

[ 3088.017363] loop5: detected capacity change from 0 to 40
[ 3088.021601] loop0: detected capacity change from 0 to 40
[ 3088.047886] loop6: detected capacity change from 0 to 40
[ 3088.086635] loop7: detected capacity change from 0 to 40
[ 3088.096235] FAT-fs (loop7): invalid media value (0x00)
[ 3088.096969] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3088.101061] loop4: detected capacity change from 0 to 40
[ 3088.113945] loop2: detected capacity change from 0 to 40
[ 3088.296946] syz-executor.3: attempt to access beyond end of device
[ 3088.296946] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3088.298746] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3088.325109] syz-executor.0: attempt to access beyond end of device
[ 3088.325109] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3088.327258] FAULT_INJECTION: forcing a failure.
[ 3088.327258] name failslab, interval 1, probability 0, space 0, times 0
[ 3088.327448] CPU: 0 PID: 12530 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221207 #1
[ 3088.327483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3088.327500] Call Trace:
[ 3088.327509]  <TASK>
[ 3088.327521]  dump_stack_lvl+0x8f/0xb7
[ 3088.329423] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3088.329899]  should_fail_ex.cold+0x5/0xa
[ 3088.333482]  should_failslab+0x9/0x20
[ 3088.333997]  __kmem_cache_alloc_node+0x5b/0x400
[ 3088.334614]  ? iter_file_splice_write+0x169/0xcb0
[ 3088.335272]  ? iter_file_splice_write+0x169/0xcb0
[ 3088.335921]  __kmalloc+0x46/0xc0
[ 3088.336462]  iter_file_splice_write+0x169/0xcb0
[ 3088.337072]  ? generic_file_read_iter+0x330/0x550
[ 3088.337733]  ? generic_file_splice_read+0x1bc/0x4d0
[ 3088.338395]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3088.339068]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 3088.339806]  ? __sanitizer_cov_trace_pc+0x47/0x70
[ 3088.340510]  ? security_file_permission+0xb5/0xe0
[ 3088.341146]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3088.341840]  direct_splice_actor+0x113/0x180
[ 3088.342460]  splice_direct_to_actor+0x33a/0x8c0
[ 3088.343069]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3088.343750]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3088.344448]  ? security_file_permission+0xb5/0xe0
[ 3088.345122]  do_splice_direct+0x1bc/0x290
[ 3088.345692]  ? __pfx_do_splice_direct+0x10/0x10
[ 3088.346350]  ? lock_is_held_type+0xdb/0x130
[ 3088.346959]  do_sendfile+0xb1d/0x1280
[ 3088.347526]  ? __pfx_do_sendfile+0x10/0x10
[ 3088.348150]  __x64_sys_sendfile64+0x248/0x2a0
[ 3088.348762]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3088.349439]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3088.350122]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3088.350804]  do_syscall_64+0x3f/0x90
[ 3088.351347]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3088.352052] RIP: 0033:0x7fd650a71b19
[ 3088.352557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3088.354880] RSP: 002b:00007fd64dfe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3088.355883] RAX: ffffffffffffffda RBX: 00007fd650b84f60 RCX: 00007fd650a71b19
[ 3088.356807] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 3088.357732] RBP: 00007fd64dfe71d0 R08: 0000000000000000 R09: 0000000000000000
[ 3088.358648] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 3088.359595] R13: 00007fffca9186df R14: 00007fd64dfe7300 R15: 0000000000022000
[ 3088.360557]  </TASK>
[ 3088.429670] FAULT_INJECTION: forcing a failure.
[ 3088.429670] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 3088.431575] CPU: 0 PID: 12533 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207 #1
[ 3088.432646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3088.433711] Call Trace:
[ 3088.434065]  <TASK>
[ 3088.434385]  dump_stack_lvl+0x8f/0xb7
[ 3088.434917]  should_fail_ex.cold+0x5/0xa
[ 3088.435506]  prepare_alloc_pages+0x178/0x500
[ 3088.436123]  __alloc_pages+0x149/0x500
[ 3088.436655]  ? __pfx___alloc_pages+0x10/0x10
[ 3088.437264]  ? __pfx___lock_acquire+0x10/0x10
[ 3088.437865]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 3088.438518]  alloc_pages+0x1a0/0x260
[ 3088.439025]  filemap_alloc_folio+0x32a/0x410
[ 3088.439632]  ? __filemap_get_folio+0x254/0xc90
[ 3088.440252]  ? __pfx_lock_release+0x10/0x10
[ 3088.440841]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 3088.441483]  ? xas_start+0x157/0x6a0
[ 3088.442009]  ? xas_load+0x6a/0x140
[ 3088.442504]  __filemap_get_folio+0x32c/0xc90
[ 3088.443135]  ? __pfx___filemap_get_folio+0x10/0x10
[ 3088.443813]  ? __mark_inode_dirty+0x68c/0xe70
[ 3088.444456]  pagecache_get_page+0x2e/0x130
[ 3088.445017]  ? __pfx_fat_get_block+0x10/0x10
[ 3088.445615]  block_write_begin+0x35/0x450
[ 3088.446166]  ? lock_release+0x3b6/0x750
[ 3088.446722]  cont_write_begin+0x4fe/0x700
[ 3088.447293]  ? __pfx_fat_get_block+0x10/0x10
[ 3088.447911]  ? __pfx_cont_write_begin+0x10/0x10
[ 3088.448560]  ? __mark_inode_dirty+0x68c/0xe70
[ 3088.449217]  fat_write_begin+0x89/0x180
[ 3088.449760]  ? __pfx_fat_get_block+0x10/0x10
[ 3088.450375]  generic_perform_write+0x25a/0x580
[ 3088.451007]  ? __pfx_generic_perform_write+0x10/0x10
[ 3088.451702]  ? __pfx_fat_update_time+0x10/0x10
[ 3088.452323]  ? __pfx_file_update_time+0x10/0x10
[ 3088.452972]  ? generic_write_checks+0x2c0/0x400
[ 3088.453613]  __generic_file_write_iter+0x308/0x4b0
[ 3088.454281]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 3088.454923]  generic_file_write_iter+0xe7/0x350
[ 3088.455572]  do_iter_readv_writev+0x211/0x3c0
[ 3088.456202]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3088.456884]  ? avc_policy_seqno+0xd/0x70
[ 3088.457456]  ? security_file_permission+0xb5/0xe0
[ 3088.458130]  do_iter_write+0x18b/0x700
[ 3088.458684]  ? lock_is_held_type+0xdb/0x130
[ 3088.459304]  vfs_iter_write+0x74/0xb0
[ 3088.459847]  iter_file_splice_write+0x73e/0xcb0
[ 3088.460506]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3088.461207]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 3088.461897]  ? inode_security+0x105/0x140
[ 3088.462488]  ? security_file_permission+0xb5/0xe0
[ 3088.463152]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3088.463871]  direct_splice_actor+0x113/0x180
[ 3088.464484]  splice_direct_to_actor+0x33a/0x8c0
[ 3088.465123]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3088.465799]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3088.466498]  ? security_file_permission+0xb5/0xe0
[ 3088.467174]  do_splice_direct+0x1bc/0x290
[ 3088.467754]  ? __pfx_do_splice_direct+0x10/0x10
[ 3088.468402]  ? lock_is_held_type+0xdb/0x130
[ 3088.469011]  do_sendfile+0xb1d/0x1280
[ 3088.469584]  ? __pfx_do_sendfile+0x10/0x10
[ 3088.470200]  __x64_sys_sendfile64+0x248/0x2a0
[ 3088.470816]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3088.471508]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3088.472198]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3088.472899]  do_syscall_64+0x3f/0x90
[ 3088.473416]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3088.474106] RIP: 0033:0x7f706eb8fb19
[ 3088.474612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3088.476940] RSP: 002b:00007f706c105188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3088.477933] RAX: ffffffffffffffda RBX: 00007f706eca2f60 RCX: 00007f706eb8fb19
[ 3088.478866] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 3088.479937] RBP: 00007f706c1051d0 R08: 0000000000000000 R09: 0000000000000000
[ 3088.480868] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 3088.481792] R13: 00007ffea5f8199f R14: 00007f706c105300 R15: 0000000000022000
[ 3088.482752]  </TASK>
[ 3088.556082] syz-executor.5: attempt to access beyond end of device
[ 3088.556082] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3088.558411] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:51:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 67)

21:51:29 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54)

21:51:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x48000, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3088.680105] loop6: detected capacity change from 0 to 40
[ 3088.716525] syz-executor.2: attempt to access beyond end of device
[ 3088.716525] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3088.718618] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3088.808994] FAULT_INJECTION: forcing a failure.
[ 3088.808994] name failslab, interval 1, probability 0, space 0, times 0
[ 3088.810837] CPU: 1 PID: 12537 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221207 #1
[ 3088.811846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3088.812821] Call Trace:
[ 3088.813143]  <TASK>
[ 3088.813434]  dump_stack_lvl+0x8f/0xb7
[ 3088.813920]  should_fail_ex.cold+0x5/0xa
[ 3088.814453]  should_failslab+0x9/0x20
[ 3088.814943]  __kmem_cache_alloc_node+0x5b/0x400
[ 3088.815554]  ? iter_file_splice_write+0x169/0xcb0
[ 3088.816159]  ? iter_file_splice_write+0x169/0xcb0
[ 3088.816759]  __kmalloc+0x46/0xc0
[ 3088.817204]  iter_file_splice_write+0x169/0xcb0
[ 3088.817783]  ? generic_file_read_iter+0x330/0x550
[ 3088.818469]  ? generic_file_splice_read+0x1bc/0x4d0
[ 3088.819110]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3088.819908]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 3088.820557]  ? preempt_schedule_common+0x59/0xc0
[ 3088.821161]  ? inode_security+0x105/0x140
[ 3088.821707]  ? security_file_permission+0xb5/0xe0
[ 3088.822305]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3088.822948]  direct_splice_actor+0x113/0x180
[ 3088.823525]  splice_direct_to_actor+0x33a/0x8c0
[ 3088.824113]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3088.824727]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3088.825360]  ? security_file_permission+0xb5/0xe0
[ 3088.825974]  do_splice_direct+0x1bc/0x290
[ 3088.826497]  ? __pfx_do_splice_direct+0x10/0x10
[ 3088.827088]  ? lock_is_held_type+0xdb/0x130
[ 3088.827684]  do_sendfile+0xb1d/0x1280
[ 3088.828191]  ? __pfx_do_sendfile+0x10/0x10
[ 3088.828751]  __x64_sys_sendfile64+0x248/0x2a0
[ 3088.829315]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3088.829931]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3088.830554]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3088.831200]  do_syscall_64+0x3f/0x90
[ 3088.831687]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3088.832327] RIP: 0033:0x7fd650a71b19
[ 3088.832784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3088.834921] RSP: 002b:00007fd64dfe7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3088.835826] RAX: ffffffffffffffda RBX: 00007fd650b84f60 RCX: 00007fd650a71b19
[ 3088.836677] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 3088.837517] RBP: 00007fd64dfe71d0 R08: 0000000000000000 R09: 0000000000000000
[ 3088.838379] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 3088.839235] R13: 00007fffca9186df R14: 00007fd64dfe7300 R15: 0000000000022000
[ 3088.840132]  </TASK>
21:51:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3088.858957] loop0: detected capacity change from 0 to 40
[ 3088.885213] loop3: detected capacity change from 0 to 40
[ 3088.903926] syz-executor.4: attempt to access beyond end of device
[ 3088.903926] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3088.905865] Buffer I/O error on dev loop4, logical block 10, lost async page write
21:51:29 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55)

21:51:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:51:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f00000003c0)="820fdf38eeeee9d1bce0b3272e1dee81d9d6692f034b5e131f13952e25d6d0947a876a5c3f53701f6846bc170e073331b2f6b1a07d8fa8622b8eafe55033a079edeff94198d11bef17c4eae3fb5c44ff0036e8b7f4243fb5a3e28f7fe8c18b14162d7c849f92", 0x66, 0x9}, {&(0x7f0000000440)="f94fe2dee5f205e59ec168a96b21b8523753185e3459dbdfb7bee48c31d91dab3c6715ffe612640b8e11634c33cb63e7798474e27ced20d4687e887ef4d0edffb699077daf1de2296596d9f4a43bf11f1af3817b708c5df1309576dc281721b539d28e0cad52c7453d726a63e976b8390ce24b36a18d552bde", 0x79, 0x9}, {&(0x7f00000004c0)="210a6ceecbfab8c4068ed5ebeb4fcadf0a254aec793f4e855130b582f5cb163dddb047f9bbbea98189969cdf272b694b729a4e270b94ce72b65eedf9cfb316ff46d30981e3436f7d9eba39852eb2cf5ce46f9be4922527554e04198b729cff3de8009f8016f2f3081086c87ace00018c8e5be46aae0ae03ca3", 0x79, 0x1000}, {&(0x7f0000000540)="a6c17df366ec3d652c318ee9a475430f6f8b4101e4fdcdf969", 0x19, 0x8}], 0x800, &(0x7f0000000680)=ANY=[@ANYBLOB="6f6c646160000000000000007d32e6ce616269000000783030ee1f33c4303030303030303030312c00a1e242e01ce69482ec80e3ccf4ca2e42918309bf4a453c3303b4ac2942c5a5c1ed3982c72ed98737aed70504a52de9fd0fd9c7c5f0157134e3ca1ced7bfc45ad"])
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x22241, 0x0)
openat$incfs(r2, &(0x7f0000000300)='.pending_reads\x00', 0x880, 0xc3)

[ 3089.030455] loop5: detected capacity change from 0 to 40
[ 3089.060374] loop6: detected capacity change from 0 to 40
[ 3089.066450] FAULT_INJECTION: forcing a failure.
[ 3089.066450] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3089.068182] CPU: 1 PID: 12542 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221207 #1
[ 3089.069050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3089.069906] Call Trace:
[ 3089.070189]  <TASK>
[ 3089.070447]  dump_stack_lvl+0x8f/0xb7
[ 3089.070879]  should_fail_ex.cold+0x5/0xa
[ 3089.071363]  prepare_alloc_pages+0x178/0x500
[ 3089.071867]  __alloc_pages+0x149/0x500
[ 3089.072316]  ? __pfx___alloc_pages+0x10/0x10
[ 3089.072811]  ? __pfx___lock_acquire+0x10/0x10
[ 3089.073329]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 3089.073859]  alloc_pages+0x1a0/0x260
[ 3089.074284]  filemap_alloc_folio+0x32a/0x410
[ 3089.074778]  ? __filemap_get_folio+0x254/0xc90
[ 3089.075296]  ? __pfx_lock_release+0x10/0x10
[ 3089.075774]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 3089.076343]  ? xas_start+0x157/0x6a0
[ 3089.076771]  ? xas_load+0x6a/0x140
[ 3089.077194]  __filemap_get_folio+0x32c/0xc90
[ 3089.077707]  ? __pfx___filemap_get_folio+0x10/0x10
[ 3089.078275]  ? __mark_inode_dirty+0x68c/0xe70
[ 3089.078827]  pagecache_get_page+0x2e/0x130
[ 3089.079320]  ? __pfx_fat_get_block+0x10/0x10
[ 3089.079823]  block_write_begin+0x35/0x450
[ 3089.080294]  ? lock_release+0x3b6/0x750
[ 3089.080756]  cont_write_begin+0x4fe/0x700
[ 3089.081250]  ? __pfx_fat_get_block+0x10/0x10
[ 3089.081751]  ? __pfx_cont_write_begin+0x10/0x10
[ 3089.082289]  ? __mark_inode_dirty+0x68c/0xe70
[ 3089.082812]  fat_write_begin+0x89/0x180
[ 3089.083281]  ? __pfx_fat_get_block+0x10/0x10
[ 3089.083795]  generic_perform_write+0x25a/0x580
[ 3089.084330]  ? __pfx_generic_perform_write+0x10/0x10
[ 3089.084903]  ? __pfx_fat_update_time+0x10/0x10
[ 3089.085422]  ? __pfx_file_update_time+0x10/0x10
[ 3089.085969]  ? generic_write_checks+0x2c0/0x400
[ 3089.086512]  __generic_file_write_iter+0x308/0x4b0
[ 3089.087067]  ? do_sendfile+0xb1d/0x1280
[ 3089.087518]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 3089.088058]  generic_file_write_iter+0xe7/0x350
[ 3089.088586]  do_iter_readv_writev+0x211/0x3c0
[ 3089.089110]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3089.089672]  ? avc_policy_seqno+0xd/0x70
[ 3089.090140]  ? security_file_permission+0xb5/0xe0
[ 3089.090678]  do_iter_write+0x18b/0x700
[ 3089.091137]  ? lock_is_held_type+0xdb/0x130
[ 3089.091648]  vfs_iter_write+0x74/0xb0
[ 3089.092113]  iter_file_splice_write+0x73e/0xcb0
[ 3089.092641]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3089.093222]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 3089.093801]  ? inode_security+0x105/0x140
[ 3089.094303]  ? security_file_permission+0xb5/0xe0
[ 3089.094836]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3089.095435]  direct_splice_actor+0x113/0x180
[ 3089.095942]  splice_direct_to_actor+0x33a/0x8c0
[ 3089.096472]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3089.097021]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3089.097596]  ? security_file_permission+0xb5/0xe0
[ 3089.098146]  do_splice_direct+0x1bc/0x290
[ 3089.098617]  ? __pfx_do_splice_direct+0x10/0x10
[ 3089.099145]  ? lock_is_held_type+0xdb/0x130
[ 3089.099655]  do_sendfile+0xb1d/0x1280
[ 3089.100108]  ? __pfx_do_sendfile+0x10/0x10
[ 3089.100613]  __x64_sys_sendfile64+0x248/0x2a0
[ 3089.101121]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3089.101686]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3089.102259]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3089.102844]  do_syscall_64+0x3f/0x90
[ 3089.103290]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3089.103865] RIP: 0033:0x7fd263e4bb19
[ 3089.104275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3089.106218] RSP: 002b:00007fd2613c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3089.107050] RAX: ffffffffffffffda RBX: 00007fd263f5ef60 RCX: 00007fd263e4bb19
[ 3089.107834] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 3089.108602] RBP: 00007fd2613c11d0 R08: 0000000000000000 R09: 0000000000000000
[ 3089.109368] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 3089.110128] R13: 00007ffc9718118f R14: 00007fd2613c1300 R15: 0000000000022000
[ 3089.110921]  </TASK>
21:51:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:51:30 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3089.150033] loop2: detected capacity change from 0 to 40
[ 3089.175630] loop1: detected capacity change from 0 to 40
[ 3089.209274] loop4: detected capacity change from 0 to 40
[ 3089.316395] loop7: detected capacity change from 0 to 40
[ 3089.325259] syz-executor.3: attempt to access beyond end of device
[ 3089.325259] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3089.327375] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3089.342776] syz-executor.6: attempt to access beyond end of device
[ 3089.342776] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3089.345557] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3089.352591] FAT-fs (loop7): invalid media value (0x00)
[ 3089.353345] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3089.452709] syz-executor.5: attempt to access beyond end of device
[ 3089.452709] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3089.454707] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:51:30 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 56)

[ 3089.526827] syz-executor.0: attempt to access beyond end of device
[ 3089.526827] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3089.528915] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:51:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:51:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x48000, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3089.674788] loop6: detected capacity change from 0 to 40
[ 3089.678099] syz-executor.4: attempt to access beyond end of device
[ 3089.678099] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3089.680426] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3089.723316] loop3: detected capacity change from 0 to 40
[ 3089.826716] loop5: detected capacity change from 0 to 40
[ 3103.070053] loop7: detected capacity change from 0 to 40
21:51:44 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 68)

21:51:44 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:51:44 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockname$inet(r0, 0x0, &(0x7f00000000c0))
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockname$inet(r1, 0x0, &(0x7f00000000c0))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x3, &(0x7f0000000480)=[{&(0x7f0000000180)="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", 0xfa}, {&(0x7f0000000300)="66c0933b6e4895af11b117126ab5052cf87c0aa90ff66b4737626e37e26c1396f994dfd432866cfd7817363227ae0aed4c1533ae71d28fc6765e56ce2f78f1effe9687f33a08f7630b5c438c147cd756de6043ecc4e3d8d01a30f13c0925d1e554656124bda4df0ae34f37fdf31c8fc5b4fa4c28c5c254ebea233c907922c110b83995", 0x83, 0x3}, {&(0x7f00000003c0)="8b4bab9b690717a28c0db496ce793277629d3ed057c2fe9646a9695e2316cd50eb1816b5ee5d7253afc75762fca6ee30877dd0087bde7242c8e744655d829771ef91434154eb5d363a020818c27632b469c5383097df5194abf511764b990537ca0cdf2370ca9ab202de8978fdfd0d6c7838fe697fe37272e0cea3db2dc9706f021af9c5ea16cb7070a902f5db306fdb5564b95b436ef78f3ccbc231a3b01e67a7c6966bc97c5d0df60f9b", 0xab}], 0x1010, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESDEC])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)

21:51:44 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:51:44 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:51:44 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x48000, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')
sendfile(r2, r1, 0x0, 0xfffffdef)

21:51:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e5c5c89b29ae56607b2179cc4da66ef"], &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)=<r2=>0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000380)=0x1)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/class/ptp', 0x1a3000, 0x4)
openat(r4, &(0x7f0000000440)='./file0\x00', 0x40, 0x104)
perf_event_open(&(0x7f0000000300)={0xeb62f55cdb049fa0, 0x80, 0x3, 0x0, 0x7, 0x6, 0x0, 0xcf4, 0x12400, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000240), 0xa}, 0x6044, 0x1, 0x5, 0x1, 0x100000000, 0xfffff827, 0x92, 0x0, 0xd0, 0x0, 0x80000000}, r2, 0x9, r3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x150)
sendfile(r5, 0xffffffffffffffff, &(0x7f0000000480)=0x786, 0x92b2)

21:51:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 57)

[ 3103.072639] loop3: detected capacity change from 0 to 40
[ 3103.074928] loop5: detected capacity change from 0 to 40
[ 3103.078374] FAT-fs (loop7): invalid media value (0x00)
[ 3103.078766] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3103.084050] loop1: detected capacity change from 0 to 40
[ 3103.114800] loop0: detected capacity change from 0 to 40
[ 3103.168180] loop2: detected capacity change from 0 to 40
[ 3103.192881] loop6: detected capacity change from 0 to 40
[ 3103.342677] bio_check_eod: 5 callbacks suppressed
[ 3103.342701] syz-executor.3: attempt to access beyond end of device
[ 3103.342701] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3103.345758] buffer_io_error: 5 callbacks suppressed
[ 3103.345775] Buffer I/O error on dev loop3, logical block 10, lost async page write
21:51:44 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x48000, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3103.650612] syz-executor.6: attempt to access beyond end of device
[ 3103.650612] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3103.651809] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3103.682038] syz-executor.5: attempt to access beyond end of device
[ 3103.682038] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3103.684532] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:51:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 58)

[ 3103.744171] loop6: detected capacity change from 0 to 40
[ 3103.840534] syz-executor.2: attempt to access beyond end of device
[ 3103.840534] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3103.843713] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3103.991616] loop3: detected capacity change from 0 to 40
[ 3118.487499] loop5: detected capacity change from 0 to 40
21:51:59 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:51:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:51:59 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x48000, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:51:59 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:51:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

21:51:59 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:51:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
openat(r0, &(0x7f0000000240)='./file2\x00', 0x8800, 0x41)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x8000, 0x3, &(0x7f0000000540)=[{&(0x7f0000000380)="225808e17202f61c570c", 0xa, 0x4b}, {&(0x7f00000003c0)="25bc35fe31c621d5dc88012a1169891bec9a81704a68dabf0ecbcad593b5dbf9798c99e8abd5286122a9715031ef4080c2f424b3330b8e077658443736b0d10ca26e259cf7d04f80932ab88d1097f3054ff55adb494efbc58f5e911a45d4fab1ee3af092d1c81fc0647bc3f7a9a27d95b4992f25fa4d316ce755bfbbec0f9fe5f8ab96d4ba6f657b24f7156b5d12188aa11da6f7461451519a10bffc", 0x9c, 0x101}, {&(0x7f0000000480)="7671b0b688fa604c77126ba6c3012a51b620a951cd46c8594c46abcdb2746be5a58c1092ecf33fe7d05cb75859807791f8c4e791d5898936323c647f46509c552fc2ea79fca887f578cac5df0e0ee9d0605d4ba5769d1e170edcfe235b15d7238cdb7d4ae1cd2fdb3ea90565b2723f34ed9593c29cd918c42437b5689e02e3ed2e", 0x81, 0x6}], 0x2012008, &(0x7f00000005c0)={[{@nodots}, {@dots}, {@fat=@errors_continue}], [{@subj_user}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0xffff}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@pcr={'pcr', 0x3d, 0x2}}]})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:51:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3118.531215] loop4: detected capacity change from 0 to 40
21:51:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 3118.558091] loop7: detected capacity change from 0 to 40
[ 3118.558955] loop6: detected capacity change from 0 to 40
[ 3118.560979] loop1: detected capacity change from 0 to 40
[ 3118.562250] loop0: detected capacity change from 0 to 40
[ 3118.566926] loop3: detected capacity change from 0 to 40
[ 3118.576913] FAT-fs (loop7): bogus number of FAT sectors
[ 3118.577773] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3118.580771] loop2: detected capacity change from 0 to 40
[ 3118.629008] loop5: detected capacity change from 0 to 40
21:51:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3118.735820] syz-executor.4: attempt to access beyond end of device
[ 3118.735820] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3118.736962] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3118.768722] loop1: detected capacity change from 0 to 40
21:51:59 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x48000, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:51:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 3118.805952] syz-executor.4: attempt to access beyond end of device
[ 3118.805952] loop4: rw=2049, sector=44, nr_sectors = 4 limit=40
[ 3118.842927] loop3: detected capacity change from 0 to 40
[ 3118.862761] syz-executor.6: attempt to access beyond end of device
[ 3118.862761] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3118.863861] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3118.911568] syz-executor.0: attempt to access beyond end of device
[ 3118.911568] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3118.912660] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:51:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3118.969426] syz-executor.2: attempt to access beyond end of device
[ 3118.969426] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3118.970872] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3119.042946] loop1: detected capacity change from 0 to 40
[ 3132.944321] loop7: detected capacity change from 0 to 40
[ 3132.947323] loop1: detected capacity change from 0 to 40
[ 3132.959702] loop3: detected capacity change from 0 to 40
21:52:13 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:52:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x48000, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:52:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:52:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = memfd_secret(0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2, 0x80200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x7}, 0x41004, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340))
connect$unix(r3, &(0x7f0000000240)=@file={0x0, './file1\x00'}, 0x6e)
socket$packet(0x11, 0x3, 0x300)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:52:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000000300)="6a7dc1629054d78ed59d722898df2edb9a281c606654f4a9e6f148f26ab838c422e78c9a7366f81686479c52bb2b903cb51a1fb18307af04286d455516c8bd3a554474a52e35986eccd0b0f16a7b72d48298a00a2c0fdbdc9f9971d6f89c456319fe18ee882687056955f2af956ba6f15dbd87c708c4b1272efe6c16f798cd38e10a0e46e9cba302aca347b4dd48a6122a5c309f7ddbeb851a85213a0a49642b6203e9719e04bbab54a52a1e903a9d1f4d100e8543edbe85532226f3d10450cc2cbcd27ecf4a4410cf4ab8a34a4ff54ca2266533", 0xd4, 0x1}], 0x40004, &(0x7f0000000400)=ANY=[@ANYBLOB="66736e616d653d76d66174002c6d61736b3d5e4d41595f45394543723d30303030303030303000023030303029322c6f626a5f757365721b2e4fea89d73d76666174002c61707072616973652c61756469742c6f626a5f757365723d76666174002c666f776e000000", @ANYRESDEC=0xee00, @ANYBLOB=',defcontext=system_u,subj_user=vfat\x00,\x00'])
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x80, 0x2, 0x3})
syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x762b, 0x9, &(0x7f0000000b00)=[{&(0x7f0000000540)="aa5f228f140ceb81923a97633a84406b49a988d12403a20979d8f8574823ba80bd6ed132e3d7de38586b5c78023551ee9b1d8ba9a7683aa42844056631980ac5b5bbff4c32c8c19cf47cccb205bc725a1f5c7c6ce6131cc37e297f85176cea930426a1224e468d7e64cdbb5d5108014162b45a782519ed2ab9f9632754ef5e9b028dff2c0f99ef2392f5784de9f942c61397208633e4ba97c5562f19de7ecb62fc31b3f32762367aa02105e705d5eb3e7820d4b5", 0xb4, 0x3ff}, {&(0x7f0000000600)="4ffd4d6b6e23bac7c0200cbf11a544ab9e50c10ee3a030cf802e23da3a6cda8de9721365b788b1d10486fabf58f5d8dcc7b5b68cdd7b6f96169e8761a70c9acd8a37859ac24ce72bfe55463520056dfaed89ae540e7a3ee59b03d756fcb859c5cbd818f91e47fafabce2d0e4140114b8ae77af2aa46019254e9017fd7b53e912759c4a04216527fc6393cbe0de5e2417b49fbac9de2845a248907ed749c0405733f20ac8ec2d2d5d518f8e9700c1208f447cc570a3c012f847e2d2e17eccd34bd92f8947cb0a4c27bb85", 0xca, 0xffffffffffffffff}, {&(0x7f0000000700)="318c6b430731bc5b74ff8694d3c5e5c9c03b683b102c60aaf0b25fb85c5ab6e817b6d52e32ab9ba50325ef58a4d9a6eacdc5fed34386b8bbe60f158c0d3dbcd2be9049ad98c471d9ebce78c37ae994d2de2e58d41acf23707c61d20e55b641e1af4ec24431fbddabef93a149efeadbeb6eab28561a7a2f0df0e305a70fd4fbe4fef7d80e2e90405ea566b79dc2fa7481faaa60661a466b8cc51a38f9b1d429ec95605da622be41e233220affbbf1f86d44fa537c117e33658c0eaa20afdede738b8302", 0xc3, 0x6}, {&(0x7f0000000800)="b40f8c694a1aeb6d3d518dca22b96facfbc4989f3bb450be5131ff5a08678f580a434a", 0x23, 0xd63}, {&(0x7f0000000840), 0x0, 0x1}, {&(0x7f0000000880)="caa6d275b2b4625faed7217de783f92269cbc27dbe3304a3263828270543072de442452c217b57d4aa892a75cacca3ef5edd893a051bbbb11068616076f85ae63b5b4445eb18c16e3fb11e0e6304eba8404ad2ea9fe29dbc57665139b7710541fd2bf364613c8eb2957a9f964051d9b7b27295a376247aab9bfeb1d69977352e63fcbf235e7372b6142e14f8ad55a55d3f6907b8be982f3b505204ea1156ed840958212b7ae0953d21a6f9a0a7226cc539e1744632622c1c7d9ad80bfed1b4717ed6e8b3916a1b98", 0xc8}, {&(0x7f0000000980)="3479a0bf72ae007d4faf23d0811ea1993abd59952953d95564211f71c872c69db0995afb4bb90e13d03f1c68a410b8baf9efde945bfaf17aee7cb691280844a6e7cdec0bfa7115482e408d3646959c23b3eb47f4081f07c4", 0x58}, {&(0x7f0000000a00)="3511f5d170728a730ae66cab4b4a050f49695f019d9c334cfd8e938e3435ac5027e32d0666906da69d548a576809fcc1b8fb6b71d63d2ea714", 0x39, 0x4}, {&(0x7f0000000a40)="36eb0abe675b9f7269ef5c852dff4f9cab8fa0ca296ad1a8d016509e23a02f3d50db1830c2bef7a2f92a71fb3d2a85bb926230fef95066575da1143c207cad8c3f8156e88679ff94b0b8ad9e07cbaefdd8aea7e92f378a635d09c86c2d7955eebc905dec82100aace44aa5d1be78ceeb09531878989881dc91beae548a871fe19c0dbbb804f5906d1fc0", 0x8a, 0x3f}], 0x1000, &(0x7f0000000c00)={[{@nr_inodes={'nr_inodes', 0x3d, [0x33]}}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, 'obj_user'}}, {@dont_measure}]})
openat(r0, &(0x7f0000000040)='./file1\x00', 0x240180, 0xe2)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x18a)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000840)='./file0\x00')
fstat(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
stat(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$nfs4(&(0x7f0000001fc0), &(0x7f0000002000)='./file1\x00', 0x6, 0x5, &(0x7f0000002280)=[{&(0x7f0000002040)="043a65cb", 0x4, 0x6}, {&(0x7f0000002080)="4186df6a0531320a06a1db2b25ba628d81eac5982832d8c7ffa7b38f7b09cfe83874903f02d34a5518b656c943d1ca9ad835a9e874ef20f4b95f1aa63e2ca8efa6598c6fcc32ba3f3b8a8c1ed653", 0x4e, 0x10001}, {&(0x7f0000002100)="76dcb09918443780f1c95d43ac9fc46f9358864d474107bafe14daf9a7e3988b15242392a75a4238d54653c24a43e065e77c48c10358c56064cbbfe895c5138a27c9b942f0afcf0bb359f961a2baef04f5283ae67e9ca7ae70cd5ab41ac6582ff6b453a31a27cceb322a7a531845e120553f7a597015d1284945c02e8dbbddde3d17c11157193b019bd60eb62740c18bd51ae8116309889ee540a7d1d2bd1758a88e86", 0xa3, 0x80000001}, {&(0x7f00000021c0), 0x0, 0xffffffff00000000}, {&(0x7f0000002200)="0f351579a957af6a49b664d41388d3ff2d1d91a9f889c1761b082e58860e9ca9561d4c031ca1c1ca682e4dc6cbc5b34122c67a9c18ad30096d6633456fd166daabafd7bd97347fd6ddc5c2918929d72524", 0x51, 0xacb5}], 0x5001, &(0x7f0000002440)={[{'y\x00'}, {'^#%*'}, {'fowner<'}, {'uid>'}, {'}^,-'}, {'tmpfs\x00'}, {'*,'}, {'#)^@*'}, {'^{+\\'}], [{@uid_lt={'uid<', r3}}, {@fowner_lt}, {@subj_user={'subj_user', 0x3d, '/+*('}}, {@obj_user={'obj_user', 0x3d, 'nr_inodes'}}, {@uid_gt={'uid>', r4}}, {@smackfsroot={'smackfsroot', 0x3d, '('}}, {@measure}, {@appraise}, {@dont_appraise}]})
lsetxattr$trusted_overlay_opaque(&(0x7f0000000cc0)='./file1\x00', &(0x7f0000000d00), &(0x7f0000000d40), 0x2, 0x1)
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000001f40)={{'\x00', 0x2}, {0x6}, 0x180, 0x0, 0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)="481d87b58b203c8ca65c050ff9087943c6f18a1c1f8d1c10e0847c63f979bac96ccd734849bc20315630b117e210b23e9bde0c65a665dde37ed625ab4166eb87e1cd2fead5a81274ecbc1ef84aef8b7e3d44583d28894fe76b52f3a55089c72fa170a1ec9d251acb1d0fa0c93f6fc8d7d08cf05cc3c76300080baf12f306adb28fbccbc871cbc29148d0b75a0c2fb6a0130e4849c56232fcd23300fa49ef5dfa8d48e531e6dd95faee2e8dfe47d963f36becb1aacf6abb360e9c35b4c5aa8ca972a451e7adec9ec275fce1ddb2bfc4d00107155ceb0b0bc5397b831bec70b3e7abeac06d51929dede354", 0xea, 0x0, &(0x7f0000000f00)={0x2, 0x2a, {0x0, 0xc, 0x6, "63e76bcf4482", 0x17, "40475d2c806e3e4463249fd7fb15a4eb5a1e7ca3cc604d"}, 0x1000, "c81755564aa75d4e2d1b60972b197204416635504fdb08827ea7d5f5b7e44e2760d57847b67098ae8e522b1e312eec281e8ebc8eec56e21386de58df6eb735dfa6dd92bed84aff501928c0b71d05d42b01e89a150b5ff217373e4b21473ffe8d79f40515bdb24dfaa05f7893f950f6b129fe177bcb5991762b6f04da405875b45792659f851b83249d0d0d7f6e2943dfb8fbaff93c1bd4dfa3ae4f52b59943456b698c3e4da41c68bdd8f79c8a4e498df21f78a61fee90bc6e1cf1afc781d7897dc3adf47c6066ffc9f52aaec21a5e51dc99fa8ce34c4b4448bce7bef5b625f404b2f7510fb531b45ac13a47679527fd460932fd3317b1498b82ef6b72d95a1a1b40cd27e69e7be2a032f529c857197671d1857e5c792deaa80e9a1296c6b2fc28cd9d92c6fdb2c193b88366ff5913bf8b32827b304fa49bc2425a91940a1ca0f65b3c05dad40c705acd11a613b7d4bd9432fece4a7ea6055f12313afae3f65e482176b726ece46e7b30b705eab30d71d5c3b1254714e3fe1283702ad2952e0317cf64f55e4a2fb7216cd6ef612226a49e2c3a781472d7a21de7fd99feab6e9c1ce185fee0a76dc884f3371682560ae431098ea70a6bb3bd32fd47c0735ada39e9b5e7dba728f93fce61229e62573da251ef8e7086c5301e59d624e14ed528a69aa1fc2c89b5804c3e91ab45b982ff0a26ea908d4bfde3bfb2a19a9d3ad282d9a71573ee3442b3e6fe512d7c15e57eac01c92d6cea5b9a5dc053f2bafac95e2fd25cdd904395f4b105957e4df942b172697a603b7faa5126ce2d49c80005bcfa2a5a7704bb4790ecf9eec2c8d0d96e413fce5651aac62e2bedfd9971f3979c9cd5e9894876a8cdd421bfaa5c536ce838c57d71c5922e6f631650266fe939db6d474e0a6796dfc371503ea1a259bfbd4c91d35e504c415eb6957a4b44a69702cc8230eb13c214c2f1cbde9e1a9ed2d66f85b7f6905ed3bfa406cf147e5681e384d9371e4c595765531caa9141106a0c03370030b234389e24afd33b63f7d70b9534b78f148c09eace2c6756930a92b4e1a24a9a38475e9423fa8de460dffcc86b74b229dd316865a198a93e25eb835f74f81fbc93dcc4fe2102ef01f5fdec6efc6fafbda9cc515a6452eb02b4d4581b3bc9cde8c0dd8fda3d6dec5474041f37b52460cb6ff0b15eace80975b05d280203045d58aa1b6c901c6ee95a35a22af389810cf53def26a9cf5ee32762c90d0e0d6e5a68e5c2a49276e2bbd1412306681005630f38c345ef021b99b625c9fcf866a0cac93ab73a7b86b4abd036ac755fb3a8ced9382458b1b883a7205ffb7a5596ff81ff359269192203fc1899fe95311f91fb6f1d7d43413bd5bdd5ff3263f2b9478b5c66603d5578d78cd563d63f6d23d39bf68ffd64f0c09085c29d861d7caac26f2fa38763ac07b62900543e782ed1c227487be0b526191731a467b7e9e1fa7403593348e425989ee069b180c6bd482adffb63bcd604cd83258e634c3b8ec0ebfe1f436ffd6fb43a77cc518afdffb5dcc5f971765ddb19ce19320df6032a5d9fb4ee176cd470114e83a6af83e001aa19774b8ceccf528f6d9b656f1a21d7f553ae78e09889846a22509d222b283de0694bebac7bb755970b6109cb83d479d28a669e8ee3146cbe306561b72a85f722c017ce8582482674747774a00f1ab69e82fe1f84ff52849eb61d1914f698172a8088c976de5f3d3ae1ae596c06e6cdf69c03c0024beca6588bfb2dbe380dd03a0752f2f34523aea6b7792e2e23948cfef631eb42d05b1a853adcca683488eaffdaad82f2b84a5577e554449f2715e8b489b9b8a74e9f5a2ce92cb0fbe89b6ebb31934fb38aae3842432f217a1b8ccaf4495b92309b5bfab3a0bf89853b58d0c2787a13ab4d59cb9b1c910bd6e33fdea10077fe41d00a80d5a7b37a110abf6f9e10c9921f7fd27608ba8ca89232e254f9c9d50b2851ebf1557e6e91625c891e46a511584531f3edd7552404727a476307ae520bc83b55f4c38460d50eeaba899e3256d58f4042c154c8a515bfdf2d89fb8019c1eaf11364955dcfad16cb03a438ab773c0faaa921e381dd7fe22204a58585e86e8c1a70d520f6b3ef7c726ef7d25aac3b84473befc1f14221f6bb30737104d18daa2dc0a9635187afdba4824834cdd06a109a82139e2d5b3bc5e3891fea80dae3145bd16c5974feee4234583479aff8d635ea90db30eabe2be35edb54b5468ef9b0f0e0260fce1893f7b989b09d903feb8f948b1b8b38635c0fa3b8029331a71e9a0ffa6181c41ce54a4f1210a1c948f2def7f62497074b1a32fbecb9e3a16afcda04a56b15e8243e2958f02a7fd9c538c7fe56b9747a0cd2dd9eea4a0945c555c742a0a8284e21758f6f7afd40cca8c48125166ec3ddb76dcc1114182953206d4263b0530fd76f54999fe0d8a272cba6aeba44a2d231c33fc838a2f8f8e62458d5992e1344331f00ab0a5fe50fd07194e9436f08e181ff7f7250ec418138f83b1f98b3fa1f2653f94c7cb2533488d3570ff354351edac528bff65a21ca33ec546a621f20cabc466f315efab49f724a50c174980c4d07cd6af429014fd17c70fb222290e8662c187d64f02f155c0839813ed49f87dd88fd47b78b4587a7cf7c81bbebaf11556702cc91988eb7dd41b499d6e4657247d609bc0c5f38c69a5b81f0417e51220dc4b74702cd69a7eb76f11d87893ce7ae44099e5ab623e474da6bf5d422f909593404920d366fadc2845870a3210e3cc4b95af759ce4e1bfdb8cbe9948ca6ec157657c8788b81b329f2e540ed15dab90e9c8001877bf4d9a1787ef4f799ab9a2141c2259b5156e99e093e6a89c88605686938917af36e669361dc39d03e37338d42570d692dda8a73d70e877b625a07c2c53c13d87906add34d4abe492357e993ee88dcf3c39a92cd416ffcfe148402a2a83c29913603803a88e1d66a3249b90201f64adc6320d4a97db8f4425d1152daa94d0e389564a01a2e95e4afff7e02d86538d8eb39d37a5577398c1c3dff4e3fb0a3c8af1bb77838b725c8f5a850bee645c54bf06594b1769332b7dad159810dccef9aa6dd211fee7970a10e68af4cb6c7d80158e366c075b3c5fb8a603e8542bc911336c53802de6aa2f3809d839001e09fa4476cdff0e546aba9e18ab13ef361908ac36445645593efc0449280efa133dba95a78a673b267b046f34d5220142d13a0c3869c602e635e06ad2a70af548adfc701f4f0af333b255e5fe7adfa1044af241f7e4603de944551eb2bb56adf311ad5b2b952a9209ff4f8788dc52a1b562e501596bc9379f19944952d27c836c1a8e733f11c1251ab1dca1ada3b2b3b0280699ac9a4a20da1b8d88df55831792da3998bebe89929ee85a5d703359cdd9e8df8cf465b9dad41cba4ee3b5ec90a8620d426aad057eb8308e63c8eb49ec5b4afb975f1b4662ee68e54d96bbac0ae2549548bd5f37e2727fbae75adef8dd5b30f8f8d9e6b0d90f13481e63a7294ed448822acc57d1543930479d7e60fcb660a9dac047f33794c6636ec2733adbf02aba892572d0b31db46b17749807a2f34abd235607d5c1a4e1e5c8569ed57ac5418c020d633335ee487d40128bb663469ae8238965010ed67fe25b9eb05d3c370680d28b0a0316ff6c4d43266c6e5c4075f33a251a793f4219f94eb912428e76bdd7ccaa26c7f5a9cb85c230c1b3390316e5322daa258b0732de5ed09510dc86e9210ea97755418791b29343ae7fd1af6b5407c139199bce773adcfc82fedc88b657b81bc6ad928df1c3dcab8723d017146afb20b2a2a0bdfcc5972198647b7a0bcfe8c1d95c65de3e7dad0b2eabe9469fb3482e9f0760eacbc0baaaef3b0c8f30e8cfac96118c084ca7e50bfe588b245900d383e643eb6cd685bf92128a4f6112b568d119931a90c7e1d11be81b4ba8bf2464e6f794cf9ab4be7bfdff9cc30f70cac2a19c63ed2cd1319e7e6a7729969e52cf7e60e3511c8877a549fac4b67150953c9a47541f53312a807449c43c72400f2d08cf5058603e58418c4e6b586f7e2098e1af71a465bd2e58739e4443c147e7d40503eccaebdfbbf094d7dcb881b10365517cb518cec998b44d4b64c1e0d1db62f68dd7932acbf6c1560f052dc4c108bf335653bb95cdb6b265d8e59081ebab6911878fd521a7960d2f8e03b74c3192ee3a3283c7bb6fc97744d54b282b920259955c137d3ff9cbf68c60a1b37c20c94bf6ed289a0fc3261e3aee3908e6781065b4125ffc502506e6c8c1eaf9338656534e30ebb2939d54f9887d6c76aabc1e5cb7fc6ff5f8f9bd3f67d784163e0d546d12462f77321a6fa5d6dce87a2e4069c39c984d4cfc402950021583b5fdef208d9bc642479a5cc00523aaf77b271b3b55748d8ef8d5c6affd03af25b4573cd934afd9727e1ccb45cce993f15e932c9176a0c77116964b8574e7491909955d59f5473839db03691fde8c4b3b234369d49cca628b8b98a1253764aa87abd861a4666d0994d6ff781f1d2db45b4593c7fb3dd9ac8595c59f0c7fd4a8575c5e69a8458fd98d3990a769c6dee2b716ce2163c0985fbd8b0a99ceaa0c55b1d2015c90abc0faadab1ee29d0f950c42512ed0288a751078e7113aa0129129bab1cf3e202c3c51a4edee1401b26dfca1f20dae717705e0e199bf69348691fcf8d6726aa4d02604524e3476a6c86e13b0dab5e14582fc29b70a4302d51a9501e967ab07101669ae1445899425354e5a90a80efeb2a463dfa1bf2e201c6227bdfa689dec740c7f07a81fc0c797bbd51efade738b91c02c34a91d22cb4733cc766700df6def430304a49df7d7e9f3df5e72af97f82cc8662a9956538b1e69c94101ac83d8966ee42e71eeccc331998138d709fbe79ead25cd62050557c9ab6b991cbac3b460ecdd4b50eb42e3e7801e18fc18a4364dbd497c9469095ca7feaeabab38c7c196c54d5d787c54a35e1bf5712792a3ecbf9739988dd86705b3f30eaa2a1722279f5be0d8cc1ea4c7fd05eb86ca4cad6aa741a3bc36c6858411313071a3ee23a09cabb999b8ad0988d0795bdd25147884b43a3c49818248006d33290fd72cfb8f3d4c6024b3b6dd79110ff8ce1acfefbb7cd428c99a747a907afdf72943c42e655200e55f82454c832994ef84249514ac393c08defda1197df70f83693528dbd7e8b4065bbbdb3792711e10a4f0854139318beb504190de1127ec096314609eb875c88ea87223a323804214b0cc38c7bf3e1afc631757a57cb03538a6ed3e36c51c3e86a83b7ec04b24a33f5ce7afe7653b01a44e61e736d868cec927228175fe2b84e57347a7d2292b2449d9defea29c6e6137d8d9012d79dac2b67d1cf00448432ca0ce7f8d408622e1b769efbdef2d656908666e91adb137d1ae32d318b655a0271b20e5d77dff5af023f788721f9761250b6724c336c822ecdf1daf366109307524d9e4a074e500023f7b60f5fd1419a26ce90bd4f17d9bb239b38fda0e1fe7a935cda788987c52e8ea991b5172afdc67e1c6e941be8109bb91d85aa6ffb97c6f405b2d3217b03655233433eb0a215ae4ddcd660eee1cad062ffa1c9b8c615fab39ffa5db34f3467646aa1b236f516ce9983057a053bf85a7f00f195a154bcbad129472d81f4d389554237560b9c88548732fc56e4a178ef129a65dc70dd6a84e1648ec59bf10cc482d4bd6ca79a2c691bf7ec9ab22e082e4755b8652d748fb428fb9b7a5c45f136bfb9d7708d792f578ea02c374e50a218e7ac424b372400a32a45951b1758"}, 0x1036})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x1, 0x6, 0x0, 0xfffffffffffffc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8401, 0x0, 0x3, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

21:52:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

21:52:13 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(r0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:52:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3132.963451] FAT-fs (loop7): bogus number of FAT sectors
[ 3132.963880] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3132.967744] loop5: detected capacity change from 0 to 40
[ 3132.974494] loop6: detected capacity change from 0 to 40
[ 3132.987228] loop4: detected capacity change from 0 to 40
[ 3133.014967] loop2: detected capacity change from 0 to 40
[ 3133.019796] loop0: detected capacity change from 0 to 40
21:52:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x48000, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:52:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3133.165814] loop1: detected capacity change from 0 to 40
[ 3133.204392] loop3: detected capacity change from 0 to 40
[ 3133.256482] syz-executor.0: attempt to access beyond end of device
[ 3133.256482] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3133.258461] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:52:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 3133.293390] syz-executor.4: attempt to access beyond end of device
[ 3133.293390] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3133.295279] Buffer I/O error on dev loop4, logical block 10, lost async page write
21:52:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:52:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x48000, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3133.389398] syz-executor.4: attempt to access beyond end of device
[ 3133.389398] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3133.391263] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3133.433639] loop1: detected capacity change from 0 to 40
[ 3133.451029] syz-executor.2: attempt to access beyond end of device
[ 3133.451029] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3133.452936] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3133.454953] syz-executor.6: attempt to access beyond end of device
[ 3133.454953] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3133.456858] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:52:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3133.505656] loop5: detected capacity change from 0 to 40
[ 3133.548360] syz-executor.6: attempt to access beyond end of device
[ 3133.548360] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3133.549558] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3133.568662] loop3: detected capacity change from 0 to 40
[ 3133.581811] loop1: detected capacity change from 0 to 40
21:52:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
close_range(r2, 0xffffffffffffffff, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc2, 0x0, 0x7, 0x0, 0x0, 0x4bca, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:52:14 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockname$inet(r0, 0x0, &(0x7f00000000c0))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x6, 0x8d8ab83ff4462e4a, &(0x7f0000000000), 0x410, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="d690deac37e64f39bc5f364449b0a5a4981597d6dba07e7ea3979b63a51e37a6e09fde034fb1aee8d1526b32fa2d1ad3a59f747db3b768a0d1e74c23febc06a6151ee9de05e80ebed4da5f82633959053bf0cb155d84f70f754aecebf1efcfdfdffeddd1932222dfb35f57370c987475b0c91f811a24e86c1a4c526e7071871dbe97237f30ec063b6d37476e0de90f132e829c13544a9dfe127ead6c62bd1c2e2a96a94ff81466a09a3552d7f42e8e117a7ef9a8fcf8a3e4f9c23ce0462b03c03ca61b228f", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="bb9b9d8782b4e86ab7bdf434165f46d97600d4447b64ddf6e14212a037de029cc3718cd3f3f05eda055d83ea6124641e244ecd02629502183f17868e612407b104f77c878bd57aa9b76f9cacbd"])
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)={{0xcc, 0x44, 0x5, 0x394, 0x2, 0x6, 0x35, 0x9}, "6660f817f39e73ae2d697c39e06dcc415d01ce18bb81f076f1d6eb1e9f09e7923f490a7cb0f925428ff7a7ddb047f18f59d51da7e09bb106924ab77aaba6226defdabbc894e3d8ec627459fe9f8c77bb177bde37a7a0028221d8d51d0928a2ce74876a49840da6f512fc667500bcfaf5c1ab8ebb5665a97a4d2a1c7caffc0d4806a41b489f29510dcd0e758d56a48279215470221e69a5916985cf9bde162ecae9edc5edeb820e40c0b84cc62ce5a94852cd0fc15e51af22719b3a86e4da4bc978630ca7d653d2eae7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6e9)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r3=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x0, r3})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3133.665971] loop0: detected capacity change from 0 to 40
[ 3133.797614] syz-executor.0: attempt to access beyond end of device
[ 3133.797614] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3133.799191] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3133.858447] blktrace: Concurrent blktraces are not allowed on sg0
21:52:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340))
openat(r2, &(0x7f0000000240)='./file1\x00', 0x0, 0xcc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:52:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

21:52:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x48000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:52:30 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0x0, r3, 0x0)
mount$9p_xen(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2860800, &(0x7f0000000380)={'trans=xen,', {[{@cachetag}, {@access_user}, {@access_any}, {@access_client}, {@version_u}, {@debug={'debug', 0x3d, 0x7}}, {@debug}, {@access_uid={'access', 0x3d, r3}}, {@access_any}], [{@subj_role={'subj_role', 0x3d, ')'}}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}]}})
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(r0, &(0x7f00000001c0)='./file1\x00', 0x12000, 0x17a)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:52:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:52:30 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r2=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x440000, 0x0)
write$P9_RREADDIR(r4, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x2, [{{0x80, 0x2, 0x1}, 0x9, 0x0, 0x7, './file0'}, {{0x8095316d26eb1f16, 0x3, 0x3}, 0x2, 0x7f, 0x7, './file1'}, {{0x0, 0x1, 0x6}, 0x7, 0x7f, 0x7, './file1'}, {{0x40, 0x2}, 0x5, 0x5, 0x7, './file0'}, {{0x0, 0x81, 0x3}, 0x4, 0x6, 0x7, './file1'}]}}, 0xa6)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x0, r2})
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80007}, r2, 0xffffffffffffffff, r5, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendfile(r6, r0, 0x0, 0x1)

21:52:30 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:52:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3149.169887] loop0: detected capacity change from 0 to 40
[ 3149.215105] loop3: detected capacity change from 0 to 40
[ 3149.231640] loop1: detected capacity change from 0 to 40
[ 3149.232517] loop7: detected capacity change from 0 to 40
[ 3149.235226] loop2: detected capacity change from 0 to 40
[ 3149.237315] loop4: detected capacity change from 0 to 40
[ 3149.239514] loop6: detected capacity change from 0 to 40
[ 3149.245917] loop5: detected capacity change from 0 to 40
[ 3149.254899] FAT-fs (loop7): bogus number of FAT sectors
[ 3149.255638] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 3149.268151] blktrace: Concurrent blktraces are not allowed on sg0
[ 3149.333146] blktrace: Concurrent blktraces are not allowed on sg0
[ 3149.369096] syz-executor.4: attempt to access beyond end of device
[ 3149.369096] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3149.370726] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3149.432754] syz-executor.4: attempt to access beyond end of device
[ 3149.432754] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3149.434797] Buffer I/O error on dev loop4, logical block 10, lost async page write
21:52:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:52:30 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='User.\\\\,][^\'*/,+!G-\x00'], &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
chdir(&(0x7f0000000000)='./file0/../file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400040000000000}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:52:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

21:52:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3149.650419] syz-executor.6: attempt to access beyond end of device
[ 3149.650419] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3149.652035] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3149.695044] loop1: detected capacity change from 0 to 40
[ 3149.711240] syz-executor.6: attempt to access beyond end of device
[ 3149.711240] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3149.712985] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:52:30 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='affs\x00', 0x0, &(0x7f00000001c0)='(\\\'%-\\:}+\x00')
openat(r0, &(0x7f0000000300)='./file1\x00', 0x200, 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340))
mknodat(r1, &(0x7f0000000240)='./file1\x00', 0x2, 0x56)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r2, &(0x7f0000000380)='./file0\x00', 0x101800, 0x90)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)

[ 3149.762679] loop3: detected capacity change from 0 to 40
[ 3149.835378] loop5: detected capacity change from 0 to 40
21:52:30 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3149.882594] syz-executor.2: attempt to access beyond end of device
[ 3149.882594] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3149.884598] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3149.955327] loop4: detected capacity change from 0 to 40
21:52:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3149.975216] loop6: detected capacity change from 0 to 40
21:52:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

[ 3150.018107] syz-executor.2: attempt to access beyond end of device
[ 3150.018107] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3150.019704] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3150.026315] loop1: detected capacity change from 0 to 40
21:52:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3150.194249] loop5: detected capacity change from 0 to 40
21:52:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="75007900010000"], &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r2 = socket$unix(0x1, 0x5, 0x0)
accept4$unix(r2, &(0x7f0000000300), &(0x7f0000000240)=0x6e, 0x80800)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x9, 0x20, 0x7, 0x1, 0x0, 0x9, 0x1c03, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000480), 0x4}, 0x61, 0xff, 0xff, 0x5, 0x3, 0x4, 0x8, 0x0, 0x8, 0x0, 0x10001}, 0xffffffffffffffff, 0x9, r3, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r4=>r2, {0x800}}, './file1\x00'})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000440)={'veth1_to_bridge\x00', &(0x7f00000003c0)=@ethtool_coalesce={0xf, 0xffffffac, 0x8, 0x7c126693, 0x7fff, 0x0, 0x0, 0x5, 0x0, 0x9, 0x10000, 0x3f, 0x4, 0x7, 0xae97, 0x8, 0x3, 0x3, 0x0, 0x1, 0x80, 0x0, 0x1ac0000}})

[ 3150.286064] loop3: detected capacity change from 0 to 40
21:52:31 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:52:31 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3150.352247] loop1: detected capacity change from 0 to 40
[ 3150.367869] loop2: detected capacity change from 0 to 40
21:52:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

21:52:31 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3150.482947] syz-executor.6: attempt to access beyond end of device
[ 3150.482947] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3150.484903] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3150.543594] loop1: detected capacity change from 0 to 40
[ 3150.583618] syz-executor.4: attempt to access beyond end of device
[ 3150.583618] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3150.585589] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3150.602854] loop7: detected capacity change from 0 to 40
21:52:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3150.665852] loop5: detected capacity change from 0 to 40
21:52:31 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3150.706926] syz-executor.4: attempt to access beyond end of device
[ 3150.706926] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3150.709190] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3150.737609] loop0: detected capacity change from 0 to 40
[ 3150.757594] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value
[ 3150.765524] loop3: detected capacity change from 0 to 40
[ 3150.817489] loop1: detected capacity change from 0 to 40
[ 3150.971770] syz-executor.2: attempt to access beyond end of device
[ 3150.971770] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3150.974055] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:52:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f0000000180)="2fc630a0e2f6dda30201f1bbc9abaac3626ff6f0683a8a1f94ff2c1ca9837a8f71665b4dfaf77b5bfef4ce38427ef49f6cbd836e3a4eaa8a6655982ec8cc", 0x3e, 0x257}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000340))
openat(r0, 0xffffffffffffffff, 0xd08085c2260fdb95, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockname$inet(r3, 0x0, &(0x7f00000000c0))
write$binfmt_aout(r3, &(0x7f0000000cc0)={{0x108, 0xc3, 0x1, 0x96, 0x323, 0x4, 0x146, 0x2}, "e10ac3deda7bdf8b5d33c22b1b23cb6c4ec77fb5d8b5d3017c30fc6193140f87323f10fcd6b65312a167fd6c5539b5b6c2daa2ba7aec2b7dc87ea1da77d69bd0a0af10935b4fbca807e29618cd3f13d04a037a0a0ba6245b679ac783fadcdbbfcd627fb8750eb7adf64ce9bc4c39deeb81", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x991)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:52:47 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
openat(r0, &(0x7f0000000240)='./file2\x00', 0x109400, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file2\x00', 0x90000, 0x40)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:52:47 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:52:47 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
getsockname(r1, &(0x7f0000000300)=@nfc, &(0x7f0000000240)=0x80)

21:52:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getgroups(0x2, &(0x7f0000000300)=[0xffffffffffffffff, <r2=>0x0])
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', &(0x7f0000000240), 0xa1, &(0x7f0000000340)={'trans=virtio,', {[{@privport}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@obj_type}, {@obj_role={'obj_role', 0x3d, '$-'}}, {@obj_user}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@pcr={'pcr', 0x3d, 0x2d}}]}})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:52:47 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
close_range(r2, 0xffffffffffffffff, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc2, 0x0, 0x7, 0x0, 0x0, 0x4bca, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:52:47 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:52:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3166.217166] loop1: detected capacity change from 0 to 40
[ 3166.217964] loop3: detected capacity change from 0 to 40
[ 3166.228852] loop0: detected capacity change from 0 to 40
[ 3166.257814] loop6: detected capacity change from 0 to 40
[ 3166.264997] loop4: detected capacity change from 0 to 40
[ 3166.294394] loop5: detected capacity change from 0 to 40
[ 3166.298032] loop2: detected capacity change from 0 to 40
[ 3166.300274] loop7: detected capacity change from 0 to 40
21:52:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:52:47 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3166.384233] loop1: detected capacity change from 0 to 40
[ 3166.401890] loop3: detected capacity change from 0 to 40
[ 3166.459672] bio_check_eod: 1 callbacks suppressed
[ 3166.459690] syz-executor.0: attempt to access beyond end of device
[ 3166.459690] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3166.461604] buffer_io_error: 1 callbacks suppressed
[ 3166.461614] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3166.493879] syz-executor.4: attempt to access beyond end of device
[ 3166.493879] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3166.495365] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3166.519442] syz-executor.6: attempt to access beyond end of device
[ 3166.519442] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3166.520657] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3166.525632] syz-executor.0: attempt to access beyond end of device
[ 3166.525632] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3166.526630] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:52:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:52:47 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3166.582821] syz-executor.6: attempt to access beyond end of device
[ 3166.582821] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3166.583823] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3166.613493] syz-executor.2: attempt to access beyond end of device
[ 3166.613493] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3166.614527] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:52:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x82, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340))
openat(r2, &(0x7f0000000000)='./file2\x00', 0x100, 0xa8)

[ 3166.654355] syz-executor.5: attempt to access beyond end of device
[ 3166.654355] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3166.655643] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3166.657830] loop1: detected capacity change from 0 to 40
21:52:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000180)=0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:52:47 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='useG-\x00'], 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f00000001c0)='./file0\x00', 0x10e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
fcntl$dupfd(r0, 0x406, r3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3166.755087] loop4: detected capacity change from 0 to 40
21:52:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3166.831017] loop0: detected capacity change from 0 to 40
[ 3166.842823] loop6: detected capacity change from 0 to 40
[ 3166.877506] syz-executor.4: attempt to access beyond end of device
[ 3166.877506] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3166.879841] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3166.888864] loop3: detected capacity change from 0 to 40
[ 3167.162043] syz-executor.6: attempt to access beyond end of device
[ 3167.162043] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3167.163957] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3167.169932] syz-executor.0: attempt to access beyond end of device
[ 3167.169932] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3167.172574] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:53:03 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="751f1d8ab3ef0c61997840748db67365722e5c5c"], &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000009, 0x8010, 0xffffffffffffffff, 0xec465000)
setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340)={'U+', 0x2}, 0x16, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:53:03 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
close_range(r2, 0xffffffffffffffff, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc2, 0x0, 0x7, 0x0, 0x0, 0x4bca, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3182.123822] loop3: detected capacity change from 0 to 40
21:53:03 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
memfd_secret(0x0)
r1 = open$dir(&(0x7f0000000300)='./file0\x00', 0x8000, 0x100)
r2 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x104a0f81ec9f538b, 0x14)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
llistxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)=""/25, 0x19)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

21:53:03 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/31, 0x1f)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(r0, &(0x7f0000000300)='./file0\x00', 0x200, 0x8a)

[ 3182.140940] loop4: detected capacity change from 0 to 40
[ 3182.141698] loop7: detected capacity change from 0 to 40
[ 3182.146966] loop0: detected capacity change from 0 to 40
[ 3182.153533] loop1: detected capacity change from 0 to 40
[ 3182.156585] loop2: detected capacity change from 0 to 40
[ 3182.157394] loop5: detected capacity change from 0 to 40
21:53:03 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:53:03 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:53:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x80, 0x0, 0x7, 0x0, 0x80, 0x2800, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, @perf_config_ext={0xfff, 0x400}, 0x40a20, 0x6, 0x54, 0x7, 0x3, 0x9, 0xf000, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0xf, r2, 0x1)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:53:03 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3182.236410] loop6: detected capacity change from 0 to 40
[ 3182.427475] syz-executor.5: attempt to access beyond end of device
[ 3182.427475] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3182.428791] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3182.457746] syz-executor.4: attempt to access beyond end of device
[ 3182.457746] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3182.459691] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3182.519642] syz-executor.2: attempt to access beyond end of device
[ 3182.519642] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3182.521614] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3182.599010] syz-executor.2: attempt to access beyond end of device
[ 3182.599010] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3182.601176] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3182.661508] syz-executor.6: attempt to access beyond end of device
[ 3182.661508] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3182.663482] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:53:20 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
sendfile(r0, r1, &(0x7f0000000240)=0x2, 0x6)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@random={'system.', '-.\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:53:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:53:20 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:53:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2801}], 0x200000, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="757365762e5c5c2c5d5b5e272a65ac9805472d00"], 0x0, 0x0)
lgetxattr(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000240)=@random={'user.', 'vfat\x00'}, &(0x7f0000000300)=""/155, 0x9b)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:53:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
signalfd4(r2, &(0x7f0000000000)={[0x2]}, 0x8, 0x80800)

21:53:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
close_range(r2, 0xffffffffffffffff, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc2, 0x0, 0x7, 0x0, 0x0, 0x4bca, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:53:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
mount(&(0x7f0000000240)=@nullb, &(0x7f0000000300)='./file2/file0\x00', &(0x7f0000000340)='ocfs2\x00', 0x8000, &(0x7f0000000380)='\\\\,][^\'*/,+!G-\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file2/file0\x00', 0xf48, 0xa, &(0x7f0000001940)=[{&(0x7f0000000440)="aaafb6cfa5fc8bbbe6441fd5eb4ed6b658248a37fe817ca7bdb3c62b003f03d3f21f52e74e2b5862fd6eb1fae7356c5871b9ab797dc313c54d336afd0a23d107a888debfee55d434ba5a1fe38b19524639e6aa1ece4e5e25631862ba65637890930e6fd17fd75be470ddbd52b7e91fe6b99f5dc50f0f1beb164cf227d20c60dfd96d988a760c26b84b0de2c894fe91bb121b8685d5cc4c5074a9abf54ac2a3b6fe0e87e3d241d4e99bb131fbb4ebc5bc417284a1ae3d06a55f9945d794d43c50f9913884a8e4157c300edfe93e2cd92e55a397962713372b134d5b5aaf0f7b6e67f491a2308eefce78047270d48227291682b6ee81384b21b4a8f3951497419d74d2817f3231debe4c2ecacf71ba00f5bc2028bcfd297d6f5fd01a2414efa0223dd83bccf97117e1a64ab632a0808127631ab20375f639b8c03caf5411050577a40d707db6f1b46edb2dd9230748dc676982eb8dddd0abdf9732267ac0c13711e22fa1125971722566cc4598e033de3ff07f5a262c8dbb37ddbb68a40596eaf82f8e49eaed7f04401a02c0335b88d73b0fdb56a5c342cba66637b0579a93f2ded0e6753593d352f7023a52a0820cae6a130df35145f0d13b0e8d942572f5562c7b3cad36af7ecc49b5ebab94a212465afffb804d65cb5abbad0dad5cc9bbf925f49eb562f7a4dd01dd17207c362bf0b11acdfc0cbd5dd5f1ae6d8cb868798181e85a663c310194109452bbdd725500dae3738461ab1c50fb48ff1ed7300a33416a4ad640f1bcd18e28f50d1809e8e7331e8cafd6450dc551fa3b104157e7ede4aecb1a4fc364a311d2a2c475edaa713579c1f8d01a4b446d54467a4d3f5f2a87161f52918a698c9223b60711c997778f356d679f94d5192fd92cf745d7e307d05e4267a85185f0b9a58fb550d972ee5cb1db07c6ae014451748400cb572c8f80c3ed9b44fa97768601861a3b71ecda2bc57a054483f2f9b50f65f5b704fb9c417983df7229a0d54119cbe04b0f91db10cbd902bc45cb69e395a8127ea103f220c89886f75a8b84a6c890d6425a5b770c417b238b2e44f452aa880c6a3edae2efc0a1b1cf4d914770a3df6840a32d35c3f46cfb157938a7f3a9d92950b2afa5f96b1bf82d45c099810927e95c030a3988e402e1fe5428e8e4dc834fbc2784574e27b02ee06435dc3e556dace4c47e11046665ba9c870e8557bac538d90d2f47e507fa412b01f809919c1f15ec074054e7a73fdc50bb07d9eb633edb1b0069b9b568713a6110abb7bf798f5e97c6590b6beb1046dd9f8b3eb0f555e3c755dfea92692259beb86270207f4da807143494f902af7b7915a6760db82700dafda8febd5b668d5eb5f5175f8254fed5ebe23a8dc1d3aa0b00e4d7b3fd8270e5e1f98a0b9f15c3f03c490c83e656db6e06783e01fb1e3d49392532eadd79e771d64c3a48f3b7b0b75f803bf78dfd298f76ec45f5fcb3f3f6c01fcd56fe3704da35fa5ab000a1a3ab9446825cde556ecb62f90aa5f5ec695df8a07c468fb784b218fd302e269a64d9a2312ac5fcfcff86e71736711c24bceb3d39278aabe125145d4600f95ecda1ec9e1b1f19a976a3ab2e0d092b598c5bec4852f35190baf645f73b81be317e80ce0d8c9601e17056e404e89cd84117477f6ed5fdb1fb8ad1b57fb33db936055f0941429c1153bacbd071c714635462f2730afccfc567f99ae7663fbbab18554006e2a1399ac4bf38c9717437342ac2052134cf25f08c799ad5b9f3b399d0287cfb91f09d7d42b2d24a58d0553be6a6dc72f1819b8008e622339b96f801ef966338e1afab3370f7b4585db078ffc2f8fb33a958364a5d82b52d8b132ebe79db261c979661e622de83146c100b2689025ee876fd2a1804f1d30fcf551ad23d7be3c3e97c4645d665f9de0e900971aa4a25931d9784d54e08673e60ca07f613cdf30a7d85aaca691421c9429209f4655ae21b24450fc8f3d3c6565bd407754751b9a1ade1d3fd797a17fa4f30c366c0127cd4f7f5717284312d7d695b36c38870f7abb54a13521fa86e953490b8a41ff0a2e718c69957d68b93d8ffb9ac1c5d958ef36c148d6be47de6a228bb2663ebf5a6fb0ebb8d9cd8a0db39332b2a9fa5652316cdeb8e9e80eb11602ec45e9ea916051b87d0a193d2257928294263bf5d406594d461a21acdb1ee37682f8ffbb06b0f78df58bd645b70d2b2015c6ed4664f57b129c0b8b89f5b58a110c5a0ef9123e726006e495e6992c4650df61caa3c4df29a328381106ee060d9880e5615f17bc51ce91c6623bebed6d02b48d8fd295a018513588e11d27898dd2aa5c003aa06c3b4294adba8026eef56c39d43099609067662a6a1ed1d619e294f6679fc62b0afb241292763b5fd2c30f77f5fea0125eb1e0521bb6d6f83b715959fcd53e8445c35e5dcd5be3344bccbdb34891671c0dc400337df43cd7a37c2e509e506a9b982d64560661e26dbc2ddddaa7a58e16bc4b387a5bc6e0d2e84df21cf036cb7ede592ebca9d8a2851a190146c7e95a40920465d23e1f44d9ef5ebef3ea5b82250b46f90a42709146898547623dba851f172f21918f28223933a4426389099966b718b814eb1443239311294c35f70180e1f79179eec8b103bdc1c356332025118c0e41cce038af69114fb70800f46ac54b3a6cb954fd61b73173481a4489bf6258eaade4aa2ec9488a523f0596439dfd0225a4a8b31fd8685825b67cec3cd0bf4f17d748cbea6dff1706e7e6a38b7774574992e886efec9afdc3bc001f1093427b809b589f70976d6c118df9c96e020dc4fdaba8fa73ed3550dff5ee528ef7154dc01851200d31694d09296ec7f2c58635a2fb8195de0983dd5120ea1103b6a5d3fbba8f91741a03aacee3b58938cdcae999adcff1cbd3297e7d620cc109e8646f1390df77ab880e176f5a49c5b034eb14320841e100b86fa0bc1109c86c69df7ec80aea6b5cb22fecd6e6f51d736feba823f7710ed3130439960d7f26109871e29a649b931bfb08964065f98239043b6ac9446bee8d13be4c97c2bff7cc0b2bccc93fe89f9aa47ee251890ef78aeeb4dd7b76b96034147ec29b6e99148f65cc7f723c993e99a8f4aea90528379001bfe8f2400f69c2d873fcbf87cd57f2a323c625db594ac2dbda07f088399fe1b6436accc61449bca820eb4ecbe9fa040e6e49079249638aaadc2acd19ca1eebef877cb3fa827001e34b5bd20f810e8e1dd08159c59e07c13dec56dcd926e8c1160567c45dd646687c5584f418e09ab7cd139e47e77b2be5001ef63c20aa9e3825e6386f471ec3b4832b8a35bff89a205bcd0878980ea3c37e649d8e96b8af4683161aa74256b15c2f9a7deef3e73bd8e23e34c6d09159a1682d1d4adcc56870512a86487c92aae7e5da6755445055145e0f7263d396dc7fd39d4393fa006a8cdb124afe6acf10b1c3e82324c5121880f1a5dd958061ddb357b78ffbd79480261047c400fc1b61ef9d56c6720f48486ca18dbe2abf2038093bf9b3a3b798c1b2c7ee6e32ef2056bc7a0d4d401accc35f540f2e18a1604302f522832a54623d88011093fdb045593be2f301d13a0606ef9b3eaf440cb66cee00fa5243b8a31c7602751a14324c7de45c3ba002ecf8477c139185f32cfd46ddd5d87712ede24e9cb5820139f0e1ff191a50feec1a7339954d63b640c0771c051dc034b3a487fb6fa68160040a3decad574bc5ce68a7cc55fc6711d536d3dacb5fca6951a47d2ff993dbc7e296d26d2ccad6aa7f47adcf40e4b04e1717f44e32f5fd39c19f0a1089ff62417aa5b4a794ef8459549dc26cd46c59ea45d8c61bc2d1b0cf0a29d295787c99c9c5168f34e0b7914d8d6b0db51897f2e228ac8f275cf833a73c7b81714ca81c56f286adbd4bb788817663bf64dcde94b79e1b7ebb0b3b6c6ed65f0257b214217aa4c201946771b7bde1b368e193547092c096eedef23091ac17097196089f7430ef4366894551fda9ea0110a5bf99d89ae57d8d0f59be542c384c8ce9fdcf7e5e5c1766a9ef0ec12732fcd7e64d0b0e999373546c99e5351e18b6296f291cba27a0c330890f4079924434a306194027eb259201ff1a89be289ef55168d25b642b6fab7d4c4710e4be72323f34ed0d3223bf5db2c77d4bc102cb29e5d5e5371d2f9525eba8c16e7032f9ba393a6c4707eae989498815f98d02e00d3d08fffa86f12cac8a224b6d4fafb2e155ab87a6a160aa6670209d1dd4dc2a42c37e06432e4b5ecb57670d375f88eb9cc095cf5c1a702a99531d90e90b1c7b76ce3c3fff2983125d3c208ef35e8123e867934957e1c6fb06afc4fc1f01b38576438f01eb18818edbf8de7c590703ab5f51ee47964daef01f7b7fc54f15a16172c2c37dadf80b7a15c44989670ba447051fdc3e0cfd86ffcc5a799f1181eb7b953a6ff75d9efc49d8dc805f9cf716581ebd190a67cbfe2467302e99f9a2bd5af75119188e5a4c2d621fe65b4639c115973ccd8c63e167585cf25b122f87f7ac6470dbfa6f1e6c14a14ccbd1de4aad1d4e637b2358ed5de01c41e0c681a323d771b5a8d0fdb70be51765e6ef61cf4b7b97c99305570c5c37f087557205c6a15430115f4f536e83f78cd39cfb63b85413d8121462c691356343198a6d0a611127f5bd4a95319d9515ef30e80d15325fba4de3a29899d96f6be878ff024fb268bb068dd00fe321a6dd8a3b808c8d6c8f1e932b6c26f4cd413e1df355c6b000437f3cc09e8653ed40259dccc7274dc09c0510d7afa202559626f8c0df74e5c5e203495cc1e06f8792590160b1fb56cf63aed486cdc477f05f8338b7dec0e1390e2fd9b4c5a87e98ab319af0857087a38cce6bad10b2e1294fb9aa6169a4bf72620d92713a9cfac24d8ecef6e159d356caf4845acdd6f8f8a1ef790dd6b116fc535346bd8c97dd709e21109541314023e7687a77cee908d8ec9de71680709d9a6e30dcf0abfe79826c07a53cde7666c448d38364fe6c71872de1aa4440e8bc76838e09adf74b7fe6266b5efbdae8dd4d5adb612019919d2c772e6f7746e18a28226cf756e39d1f9af61bf60ab46c41ef755a10a20586b143dc0d4daad8ae515986d1e21131bf55302c0c8585009d2648ebe04fd29ffaa0c417e978bb5da0326a4c12d34d179ecb9567f353195fc2d376f9da6aeca629d22682a8f8d65cc0fd0a54d9f26388b8dd097f2b8c072427c7f4e45d71b7fc5bf61d98cabd0ab5c49639150f813f2abebafca3558df3eac0b063c9672d7eaf378a81c209d93895f2dbbec2602ee4422b65e5428acc096d63a83d5472105fb7e463dba4f5613f2f4ad3fd7eeeb993904d4354f64eaddd71d6aa5eaff57d9a7d1fdfe0dab8f9f04f0e0e5e60ad545f5f6d7aedabcf2e76161f236993d1e184c15038ddc632bd3fb26c9bf114dc811a01074899118e845666b8a0d5a3ba368a5c3a997bc2e6934b8cca22e343a56b6fe168e5453b58d0eaa64c56b57d5ee3f67408409a937f161fe20afe4770e19d9a67d18845d9f71a60b872e282248a0675e5b1683af1507c521b9f853c21f0584afc895b79040cd48952ea2d8c28e8055e9a8d762e378d2ee1dde4281b74111e104e40494643369774320385223e25e720d13d1441139c266d68d096926702c3ef6f0ecf1ceac36a9b23ecb23f6da6f6fcb8ba1bc5787b429aca5eaca66d2e26e608368d1f1d3fe5e6bfb6fe50bbea9bda467176831ea0b0178221591c6c4266b83777d22d6f99bfdb5a1254d942f4f8123648561ccd14dd05373d0b86ccea8f6e2caed", 0x1000}, {&(0x7f0000001440)="29083699f44400319e0353708a504c", 0xf, 0x1}, {&(0x7f0000001480)="278d5cd0573682361c1e38e7bc6c71a59cc62e01326e59d21c362b2ea33870ceb31e3ee66f5e26af0f8bf585922e201a72bf4fe0f64497e614242ab04ff1bd0ea13054c5e46f75b20be6d8f0a9632925dc1adcd278651b7bd27b443b45e1af9470defcda22abd122f7ef42d13fbb3e3be0aff04512fcbe1e524647dd13511730ecf9cc28c4476b576203c47806cd1ff6a19313541c5e399c75c20f71719500a8fa595b38af0f47276c29253810", 0xad, 0x8}, {&(0x7f0000001540)="5d9ca3aabab55e003504d19b698f17e19d89c94aad83295127389c115ffb209a42738d245ce25d1173961e93a3d9c3da8a7991e3a68df7a6ff8ed4a4752807a75cc5", 0x42, 0x8}, {&(0x7f00000015c0)="21332e49d466ee673d4e616db6152e304841b37f258b697ce6d68626fc031ff191b2669b737408bd2456bb340f6cc46bc150bde3b7ab1b499b3222d6d94b07d25a3fc12be749e1f9df89fd519f3184ebf25963d24bc710f44ea32d7fae150c2bff1a283b6b6e30870673c5df98e69b11332016d4f4e8a611140ccf43a6d4b9e05895e5b8f9344ee584a2caa6806f6925b4b9768b027c7c3dcb0c8c115b5787970b51cebe364ba394e9a6cfca189ad2fff2ebea50d2bb3eb181fd6505afaadc79221ef34538b44975c614e6caf30782e29477deae3ad4281a60efa0d7b7ed4fc1537793014bedee47791d4063280654ebe306e91f4496", 0xf6}, {&(0x7f00000016c0)="78e1fc3427def9f97a5a246e5be37a5bbf9fdfd796613c97d9733fc6838248dbf357b3c42afd47626317e48c284b49984e4112d5cb21d541d90bf4a92e05c7d99314b83288d1c31b0ab61b1a32ffe181a0c79f3ff2caea9c52832fd56d", 0x5d, 0x1ff}, {&(0x7f0000001740)="1b1e477785c04cb895d1799ca5b7ef696ca19ee0d990fb0ac68ad48102d43513db570538c31c5b382c66e7007307", 0x2e, 0x81}, {&(0x7f0000001780), 0x0, 0x10000}, {&(0x7f00000017c0)="c861ebb27e1873ea4c00ebc1302ee99b08c408af64794a0e53dfb3af865bc94dacddea83a4f4554780e998b85dffa2367ec74534e5672c12d01bd4fac463d87a63987086b852a39c2ff41ce14a1827159f094c80159202739977e9ec8b00427b7d452aa9650e67aec9689a674230550c2156951e05de23bae4b060903b4867ad42da21a3bded4aacd36f148f6812c04b978ad6f13b406e865dbd2e6cd5b6af8efb60ba6bef9b3726abc66767b82e5a8f781fe10c1690af8100d7a3d4f5e91358b852daa0e49d8c82c4026b2daa1fa57c9898051dfeacbc4fd787622c02412a", 0xdf, 0x100}, {&(0x7f00000018c0)="cf324b243fe58be12e24f3375a99f5a640ffc126c29fefeeead30a1b7abc5721551db1b34695a66defbcb08fe0fdc788f777ff05ea6c9958cb90cb7c75441130aa6513d3c55a50b1f3bdf2f652e79b290061412d9d16f8d785634be7fe8be79c7bf5cf8d704f66", 0x67}], 0x141001, &(0x7f0000001a40)={[{@uni_xlate}, {@shortname_lower}, {@shortname_mixed}, {@fat=@dmask}, {@numtail}], [{@subj_role={'subj_role', 0x3d, '['}}, {@measure}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '\\:#'}}, {@fsname={'fsname', 0x3d, '\\\\,][^\'*/,+!G-\x00'}}, {@fowner_gt}]})
r3 = openat(r2, &(0x7f0000001b00)='./file2\x00', 0x900, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001780)={{0x1, 0x1, 0x18, <r4=>r2}, './file3\x00'})
pwritev(r4, &(0x7f0000001c40)=[{&(0x7f0000001b40)="ddbf7782ab8b4a50f092c519676820d45eb8591ff2d41ceddefcafe9a926f806e726c87501ce6300a44c", 0x2a}, {&(0x7f0000001b80)="cb12664062460457c7b74ffc39db0f528c98d627e1c76166b469da8b3c563af1e75328444114513437c3c28c3633354f2cb55c5a7013a5bcd9d606f96a71a50c704ed8ba7ee715a8fb6d2b09f8f5b513ad20c890e862b535431ed20218e0b69fee5c195ad5d892e8162e2eb7e254e19586b4fafb0e88309c98a35737c1e4586d9aedff7df847f030a0297fdba4b26b1d63b23efa23fbe8b8fdbfe7d19bca", 0x9e}], 0x2, 0xff, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:53:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3199.911998] loop6: detected capacity change from 0 to 40
[ 3199.921416] loop0: detected capacity change from 0 to 40
[ 3199.931568] loop4: detected capacity change from 0 to 40
[ 3199.933090] loop7: detected capacity change from 0 to 40
[ 3199.941356] loop3: detected capacity change from 0 to 40
[ 3199.986185] loop1: detected capacity change from 0 to 40
[ 3199.991024] loop2: detected capacity change from 0 to 40
[ 3200.008008] loop5: detected capacity change from 0 to 40
[ 3200.049898] syz-executor.6: attempt to access beyond end of device
[ 3200.049898] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3200.050997] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3200.125680] syz-executor.4: attempt to access beyond end of device
[ 3200.125680] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3200.126855] Buffer I/O error on dev loop4, logical block 10, lost async page write
21:53:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:53:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3200.224931] loop3: detected capacity change from 0 to 40
[ 3200.281935] syz-executor.0: attempt to access beyond end of device
[ 3200.281935] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3200.283591] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:53:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x141000, 0x80)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:53:21 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000340))
recvfrom$unix(r0, &(0x7f0000000300)=""/111, 0x6f, 0x40, 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000440)=<r3=>0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000500)={{r2}, r3, 0xa, @inherit={0x50, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000000000001000000000000007f000000000000007f000000000000000700000000003300001000000000000000000000000000000400000000000000ea000000000000000700000000000000"]}, @devid})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)={'U-', 0x1}, 0x16, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r4, 0x0, 0xfffffdef)

21:53:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x137780, 0x76)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000180)=0x80)
sendfile(r1, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffb, 0x80000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240)}, 0x18a, 0xc0, 0x9, 0x4, 0x80000000, 0x9, 0x9, 0x0, 0x8001, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8)

[ 3200.357580] loop3: detected capacity change from 0 to 40
[ 3200.366522] syz-executor.2: attempt to access beyond end of device
[ 3200.366522] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3200.368084] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3200.388632] syz-executor.5: attempt to access beyond end of device
[ 3200.388632] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3200.392756] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3200.408040] loop1: detected capacity change from 0 to 40
21:53:21 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r2 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
r3 = syz_io_uring_setup(0x2064, &(0x7f0000000300)={0x0, 0x2a80, 0x8, 0x1, 0x119}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000240))
splice(r2, &(0x7f0000000000)=0x80000001, r3, &(0x7f0000000380)=0x7, 0x3, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3200.440270] syz-executor.2: attempt to access beyond end of device
[ 3200.440270] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3200.441842] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3200.453850] loop4: detected capacity change from 0 to 40
21:53:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3200.530417] loop6: detected capacity change from 0 to 40
[ 3200.532039] loop0: detected capacity change from 0 to 40
21:53:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:53:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
close_range(r2, 0xffffffffffffffff, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc2, 0x0, 0x7, 0x0, 0x0, 0x4bca, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3200.638690] loop3: detected capacity change from 0 to 40
21:53:21 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="757365722e5c5c2c5d5b5e272a2f2c2b21472d005450454b6ed12a59c68a7c1e924361643e9352ea0aec8a892e7be6a9c24a9f701a026c9ecc0a1fa2c020c1c3edc48c60c71427326447ffcaef5bf6e54cc336d9fb8cb144d19d22dbc350ddafd26e5025985e88fd468aaef043bc249d2736ada15d7cd84b5c4427a7da26defbaa9f80b5c580132ec8ef3528097bd2e839ce70570163a8ce6270c251ca968a9b4d8e873ba7fda66fa72bb76352c594a681c48b4658948dff64e3bcce8ca1b5f51cf2edf73025f420c92e85ea0e3a308e583eca0ff1421f2a98853671bd72fb6269e983dc437f71"], &(0x7f00000001c0)=""/39, 0x27)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec463000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001040)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES64=r1, @ANYRES64, @ANYBLOB="da5a2d6f3840d397f393bc7dd0c1ed0bf4310bc972d9e1721bacd9a8f8ab94eb195a727a631af9a696a6d18eecc97047be8fccc9ce0929a653458b58ab31e5bb715b2f74820157aeb353e70ba38b0409fdf3c9d6f16103948117f8a165bc61075d7d", @ANYRES64, @ANYBLOB="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", @ANYRESDEC], 0x220)
pipe2(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
io_uring_enter(r3, 0x5681, 0x7c2d, 0x0, &(0x7f0000000400)={[0x9]}, 0x8)
r5 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2})
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x83, 0x9, 0x7f, 0x20, 0x0, 0x80000000, 0x800, 0xf, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000440), 0x8}, 0x2084, 0x0, 0x7ff, 0x4, 0x27fff, 0x4, 0x2, 0x0, 0x7fffffff, 0x0, 0x1}, 0x0, 0x2, r4, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000340), &(0x7f0000000380)={'U-', 0x3}, 0x16, 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x11405e49d5eecc0c, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f0000000300))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3200.730328] loop5: detected capacity change from 0 to 40
[ 3200.733374] loop1: detected capacity change from 0 to 40
[ 3200.785485] loop2: detected capacity change from 0 to 40
[ 3200.824578] syz-executor.0: attempt to access beyond end of device
[ 3200.824578] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3200.825879] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3200.837477] syz-executor.5: attempt to access beyond end of device
[ 3200.837477] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3200.838496] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3200.869745] blktrace: Concurrent blktraces are not allowed on sg0
[ 3200.872026] syz-executor.4: attempt to access beyond end of device
[ 3200.872026] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3200.873497] Buffer I/O error on dev loop4, logical block 10, lost async page write
21:53:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:53:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3200.909837] syz-executor.6: attempt to access beyond end of device
[ 3200.909837] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3200.911804] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:53:21 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3200.936992] loop3: detected capacity change from 0 to 40
21:53:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
close_range(r2, 0xffffffffffffffff, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3200.989941] loop1: detected capacity change from 0 to 40
[ 3200.990812] loop7: detected capacity change from 0 to 40
[ 3201.016886] blktrace: Concurrent blktraces are not allowed on sg0
[ 3201.017201] loop5: detected capacity change from 0 to 40
21:53:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
setxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=@md5={0x1, "9d58ea1ede3371aeb991adb663e4c2c3"}, 0x11, 0x3)
setxattr$security_selinux(&(0x7f0000000380)='.\x00', &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:policy_config_t:s0\x00', 0x25, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockname$inet(r2, 0x0, &(0x7f00000000c0))
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000340))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000004c0), 0x0)

21:53:37 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:53:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
close_range(r2, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:53:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000700)=[{&(0x7f0000000200)="cfaa38910f26abc2d52238dbe638608dc5613384ce2b1efd41d204c02eed54db8362d5177a5e9bc43f0a20b6124af04de4b9c0c74c07", 0x36, 0x50000000000}, {&(0x7f0000000600)="02ecda8d3195418586a9dfeb20358de9cb4eb24708fd33330114beead76b727f1b01d8b5732377f639441ddbbc289545a03d12402478e0064285f16ab1197fe510d39774c0db5468753f2f6fe7e0efec37f56cd96e8bb4b5b1e8f556d1d5417cc1344d159dbdad6aa8db9dc7e43aa87a27ec6a3ea9b71a49ba964f2e43ce90c9f7923199f15125bc3d6966c335b5912f850b0244811ca9d5371fc5188dd2d19ba429e13fa69223f8e16eccf77b1932803abe3720bb5d327742227ae83a85b1a9684d39071d240fc30f539a4260e2ad9876bf75f6fa92", 0xd6, 0x18e}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000900)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000980)=""/17, 0x11}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}, 0x2000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340))
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000740)=ANY=[@ANYBLOB="010000de00000000000000004be53ecea98476a68810aef5a3d202ca9766df8684c06c1f672414153433ffd7e6e1cd94b645110efd63b093e4eb52dd4b34b5817abec55dc35bbf30e22cf03151368313dd7b5dfe7cd3c04ecd44db2aabd78d077b7c16bc50573f8611b89f3e0000", @ANYRES32=r2, @ANYBLOB="02000000000000002e2f66696c653200"])
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
setxattr$security_capability(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)=@v1={0x1000000, [{0x800, 0x3}]}, 0xc, 0x3)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x6d6a, 0x2, &(0x7f0000000240)=[{&(0x7f0000000300)="08f360fafa501a08ab4b97ae7c82e0e0bc597efb345889968468fc56811f3cb87162dc53092f752e2fd9629dc8b5041ea3abfabe92b17433d87021fbde654567edc5603944434ddd15423967b729774b7339f754afca9865b5677c8b79a6850c24f21534db3b42ce95c57e23cf9bda36971f774ccf5a8e9a8670e95ad52ff29cef043743b45c24c91219634bb1d848eadcb2f13d07a0c9f80c95270e7dcbd4d9171474a49e3b49ce97bdb04248dd07ac9577bdd43281c4bb5d200543017bb38e3016dd5c558a7d565d5b60fa6e199bad5cc74d224a9b162f503bd62fa9ec3dbe93a8a3fa5ff7110343537e58072a947d0b00fa2d4676bc14", 0xf8, 0x80000001}, {&(0x7f0000000180)="cd8cb81be590ef861e2d1f2cc900f82e0efd17b71749c521db98637f3fc2bc3e533f9fff5c9c0ce04894f3d7efbedae87bde6ad8ba7daf483497b228b8a3037d270b2e99e85b88cc75cc0ba4a98913fedb221cf1a0d49ff344e0512dad1a2f9a1778ab9b5aa01f7deef2ae6377a5253d23e03145eaf0e5f75357", 0x7a, 0x8001}], 0x2304000, &(0x7f0000000480)={[{@nobarrier}], [{@uid_lt={'uid<', r5}}]})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r6=>r4}, './file0\x00'})
connect(r6, &(0x7f0000000800)=@ll={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @multicast}, 0x80)

21:53:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
io_setup(0x7, &(0x7f0000000240)=<r3=>0x0)
io_cancel(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0xffc0, r1, &(0x7f0000000300)="0db2a338b697372cbe7a", 0xa, 0x1, 0x0, 0x2, r0}, &(0x7f0000000380))

21:53:37 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:53:37 executing program 3:
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3216.545970] loop4: detected capacity change from 0 to 264192
21:53:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x7, 0x2, &(0x7f0000000240)=[{&(0x7f0000000300)="3230ab26929b680dc1cad566810e4cdd1621a935b1f061e2c145cfdf3f9a1107ef64a846e6fd40eca0000c0a183eee57d5f1ca6d9691e79252bb0384c58343562ac1b901", 0x44, 0x49bb}, {&(0x7f0000000380)="1c2aafa471416b7336f4662ccdb5477db498c43fe89e7810106aa3b68eada0d96aa778e2f76ae45b8d340f8761757c6d13f2b57121949229890353f296aa7e34c42c128f1d9c", 0x46, 0x9}], 0x4000, &(0x7f0000000400)={[{@uni_xlateno}, {@shortname_lower}, {@utf8}], [{@fowner_lt={'fowner<', 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, ')+.}.#@'}}]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={<r3=>0x0, 0x0, "b03a0a89d4875ccf15016bb94a793223af2896d9e99868e90b1cdea9443d257bfc73241298fbc891d4ce70d26e70438fc92ae91351195b1fda70a2061ebedd83708f97007d4afda6d1439d9400421716e0bc9d9259eac610075c7b5169a4af48d4b8c5aa5e352938679e2391914c3d6be1b22d0decce5db1773a09b8b88c538d6ba4ba25f93367fdb9e1810552599a5520a5bcca9bfbb3e50547a60472ff6c827c016e459b598daa6697ef08446dd33d6b1e3cb50dfd4b2357fcefa8eba4abc2062e8d894ffdc3850b3a5cfb30e1570ccf69196c5ecc225065a3728d03bdc0a516a57680f48d334e981b3c7ed76b3b822486e7ab619964fe22fa4de52e33eae5", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r7=>0x0, ""/256, <r8=>0x0, <r9=>0x0})
r10 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x5, "af2f1a9317bc6f"})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000480)={r8, 0x8})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3216.570468] FAT-fs (loop4): bogus number of reserved sectors
[ 3216.570901] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 3216.573960] loop1: detected capacity change from 0 to 40
[ 3216.587813] loop0: detected capacity change from 0 to 40
[ 3216.607619] loop4: detected capacity change from 0 to 264192
[ 3216.619368] loop6: detected capacity change from 0 to 40
[ 3216.662663] loop2: detected capacity change from 0 to 40
[ 3216.674849] loop5: detected capacity change from 0 to 40
[ 3216.686031] loop7: detected capacity change from 0 to 40
21:53:37 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3216.793848] bio_check_eod: 3 callbacks suppressed
[ 3216.793863] syz-executor.6: attempt to access beyond end of device
[ 3216.793863] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3216.795664] buffer_io_error: 3 callbacks suppressed
[ 3216.795674] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:53:37 executing program 3:
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3216.874574] syz-executor.6: attempt to access beyond end of device
[ 3216.874574] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3216.877728] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3216.899583] syz-executor.5: attempt to access beyond end of device
[ 3216.899583] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3216.901380] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:53:37 executing program 3:
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3217.028466] loop1: detected capacity change from 0 to 40
21:53:38 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3217.111580] loop3: detected capacity change from 0 to 40
21:53:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340))
openat(r2, &(0x7f00000001c0)='./file1\x00', 0x282240, 0x80)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:53:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r2, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3217.208027] loop6: detected capacity change from 0 to 40
21:53:38 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3217.239565] syz-executor.0: attempt to access beyond end of device
[ 3217.239565] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3217.241715] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3217.243321] loop3: detected capacity change from 0 to 40
21:53:38 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3217.310865] syz-executor.6: attempt to access beyond end of device
[ 3217.310865] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3217.312099] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3217.319583] syz-executor.2: attempt to access beyond end of device
[ 3217.319583] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3217.321685] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:53:38 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3217.358760] loop3: detected capacity change from 0 to 40
[ 3217.408658] loop4: detected capacity change from 0 to 264192
[ 3217.425488] syz-executor.2: attempt to access beyond end of device
[ 3217.425488] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3217.427338] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3217.433009] loop5: detected capacity change from 0 to 40
[ 3217.444300] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value
[ 3217.517396] loop4: detected capacity change from 0 to 264192
[ 3217.542343] loop1: detected capacity change from 0 to 40
[ 3217.581004] syz-executor.5: attempt to access beyond end of device
[ 3217.581004] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3217.582722] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:53:50 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:53:50 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0x0)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:53:50 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:53:50 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000440)=""/236, 0xec}, {&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/190, 0xbe}], 0x7, &(0x7f0000000880)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [<r0=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}, 0x0)
unlinkat(r0, &(0x7f00000009c0)='./file0\x00', 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:53:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x844a, &(0x7f0000000300)={'trans=virtio,', {[{@access_user}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@nodevmap}, {@msize={'msize', 0x3d, 0xfffffffffffffff9}}, {@privport}], [{@pcr={'pcr', 0x3d, 0x2f}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@audit}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@subj_type={'subj_type', 0x3d, '^%(${)7+#&-]'}}, {@permit_directio}, {@appraise}]}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendmsg(r0, &(0x7f00000019c0)={&(0x7f0000000400)=@generic={0x28, "ec9131e34b8797bc35017d09f325e55bea2824b7aea2943f1fce596bae771df60838b655ece52c7c6f8633d37f525e34ef26b79876ae588b602a3dc655009f5d168c72c240ca7b99cf9b162b77be76c4aab73c80fb64c9db3824197c5f8c6d22745ed3b34dd57586c0fda852d1810203d46074c16b600981c508df5cfd07"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="a578b3a5343a075f9d906d3649e26ee55e81e44e9001a6595bc98d44dc7fd7c4d499b64232dab5af28bb66ea634231f9052108884e1ea0180d1f36daa63025bf570e6b5ea61e2d6ad8f11eae4862725fb3938d29c3b52660241f627719507614a268ea7bd0558457ed506e41d8e4f60517fe31c550de73ffa5bc5037a02ff26b34c9238bdfe1822a6f00fb6ff2add77c847cb8ef4410d01181e9c35fa804de1396daaa3f6f081f4ddfc31b11480b32aacd19872d6f8451c4", 0xb8}, {&(0x7f00000001c0)="9f0ab3f1091af13732e0a13b61928276377ade11e2a388", 0x17}, {&(0x7f0000000240)}, {&(0x7f0000000540)="257414fb344086c9183001db1d0eb66853f09e7a5c1f32fb8a9cfbb432c2004b61bfb44a6b7d03705fe4412e0339805b9b7b3e74cae46fe86a933eb1a5a53c9d", 0x40}], 0x4, &(0x7f00000005c0)=[{0x1010, 0x103, 0xfff, "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"}, {0xf0, 0x110, 0xcb757861, "4c31f2ab64faf9bfb53f905c8702e3dde403d01ada72319b004a328b205d6a6ac4c14ecc17a4432cb152acf77057d81320cf728a17946b3cb26c202b82d05f6c6edf7782387822fbad4502b1105fda01908cd5955630c7d2a2f12ba507d289dffd7b62060859ede7b9ff45f4b59fb72a99dccf924ce2207a725d86ca750916f5bcf896cf8d5f6dce49ddd09f4cf7e52f0d490de1cf04ae7c01534a87ccc34b629ed020f974df1568319d771f898f83e7b56bcda3c57557fa0f656c46a0f828520287f71bc04b29f41533a1cab314ac5617938f37c4d50d8bcb88b949d66f"}, {0xd0, 0x6, 0x3, "a8a5de6f3b85e0c3b2a0f29a6d1fd059070e55f9f2c4c714cafd354417bec06337963efb1b81a836427f12362a32af29b978604f9925acb4300a1e53a50b81e5d9d9d4b73d0815e237d5bf825e2c7ae0734dac33b8248109633c2fc5be424b9fbeef2f8b831ffde44c3f7892670a768cfefac1c7fb9d4806604efb08893d6d137a0af124370b37e023c1a641abb519c65b80c83c065537e2730168fdc52b6c3bd59bce8af3c6ae2c5b5ea6297a012e312064f8c38451e82b85a7a7a0"}, {0xb8, 0x10b, 0x6, "9e8aea49c4f36e7770a18f50479c3a85007f53d6d98ac52a2a64138a9d5f313a54eb9f742b091a5b5cae6d386670c8982e6ad53d03d21feaaac8471674020ad1b027f8e12bfc5aa378a12e9da51392727d32ae1e1f92df6bc32606ef10bdc8e7aa61725f49e10269a0245f88b1bd625bb4be2ef723d6df3eb27a652df5c3202c61ba58806adbb28ee7e236c766189874a6b0655d1bd54bc9dda2993a5089376128c8"}, {0x18, 0x110, 0x1f, "c42bfd4a163f"}, {0xf0, 0x11, 0x800, "7a2c093069d57abad96d5eac951181a276fba1718ebde5efe2cb1808783993df6857b1e58b7f9231671ea8f6c6515b53321c0cd2e1dfa19dfcdb76221508225f5279b85a3dfdd1fcc8c1895f23776012819c054c4fcc4c5b5e2aa1d445fc3bf1b0995b2269256ce6a49cc29a551369473011e33643b9698729a58c3dd8b368aec83cb3e21fd3d6cd66ab1b919e41c656334ef818da9fdc6f0caa3fa6bc2fa2165a339e7cc1e4073665d38c7235b0b6f03aade86a7a092d2b5db657005265d20fb2cb52bd2ee8acedca7d031f77cc3323fd3b38450cc67fba4a90881537a19e"}, {0x38, 0x118, 0x4, "e5b0ef33424dff75f3c6ca27dc7fca8c5ec6d7aac6876d613fc92875150f3b8a83a4"}, {0x30, 0xa, 0xf0d2, "9784aed161f4ecea60d05618c53b305d15e8cc94e0ab4ac2ded0"}], 0x13f8}, 0x20040880)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:53:50 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000001c0))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340))
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x100010, r2, 0x3ff)

21:53:50 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:53:50 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x6, &(0x7f0000000000)=[{0x401, 0x81, 0xff, 0x8}, {0x0, 0x80, 0x8, 0x5}, {0xa498, 0x1, 0x1, 0x4}, {0x2, 0x0, 0x81, 0x1000}, {0x5, 0x9, 0x1, 0x1f}, {0x7, 0x8, 0x0, 0x1f27}]}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340))
sendmsg$AUDIT_USER(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xfe6f, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x3ed, 0x200, 0x70bd2d, 0x25dfdc01, "e4fc89e99f8e961bcb60dd9d8ebcdb5e352557f7f69b177e6cad0cb8f837bde06b0d", ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x2c004)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r5 = gettid()
syz_open_procfs(r5, &(0x7f00000003c0)='attr\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syncfs(r0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)

[ 3229.986040] loop1: detected capacity change from 0 to 40
[ 3229.988336] loop6: detected capacity change from 0 to 40
[ 3229.991876] loop4: detected capacity change from 0 to 40
[ 3229.994657] loop5: detected capacity change from 0 to 40
[ 3229.994785] loop0: detected capacity change from 0 to 40
[ 3230.004400] loop7: detected capacity change from 0 to 40
[ 3230.008442] loop3: detected capacity change from 0 to 40
[ 3230.008984] =======================================================
[ 3230.008984] WARNING: The mand mount option has been deprecated and
[ 3230.008984]          and is ignored by this kernel. Remove the mand
[ 3230.008984]          option from the mount to silence this warning.
[ 3230.008984] =======================================================
[ 3230.010350] loop2: detected capacity change from 0 to 40
[ 3230.022622] 9pnet_virtio: no channels available for device syz
[ 3230.054891] syz-executor.5: attempt to access beyond end of device
[ 3230.054891] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3230.055780] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:53:51 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0x0)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:53:51 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3230.146663] syz-executor.6: attempt to access beyond end of device
[ 3230.146663] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3230.147849] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3230.163215] loop1: detected capacity change from 0 to 40
[ 3230.171414] syz-executor.4: attempt to access beyond end of device
[ 3230.171414] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3230.172615] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3230.205341] loop5: detected capacity change from 0 to 40
[ 3230.208520] 9pnet_virtio: no channels available for device syz
[ 3230.222587] syz-executor.4: attempt to access beyond end of device
[ 3230.222587] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3230.223565] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3230.288796] syz-executor.5: attempt to access beyond end of device
[ 3230.288796] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3230.289701] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3230.311785] syz-executor.2: attempt to access beyond end of device
[ 3230.311785] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3230.312891] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3230.331661] syz-executor.0: attempt to access beyond end of device
[ 3230.331661] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3230.334261] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3230.376822] syz-executor.0: attempt to access beyond end of device
[ 3230.376822] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3230.378148] Buffer I/O error on dev loop0, logical block 10, lost async page write
21:54:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:54:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:54:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="757365725e272a2f2c2b21472d00edbeb4f6758b17be94c020b4ff9993bb5f39f4b90bcb3bdd33be285099a7178f36778025916549f15d2ef5d7aeaeab0e19f88dab571c4ade2ab2f84a4d88aa4605e91b65f5867371c329ad082bbe10ad620c804c56c65997a08213ae1ff71a7425ecc84218"], &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:54:06 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000340))
openat(r0, &(0x7f0000000240)='./file2\x00', 0x102, 0x28)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340))
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000007cc0)={0x8, 0x7f, 0x1})
inotify_add_watch(r3, &(0x7f00000001c0)='./file2\x00', 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:54:06 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:54:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0x0)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:54:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x1ce)
fspick(r0, &(0x7f0000000040)='./file1\x00', 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:54:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3245.269706] loop7: detected capacity change from 0 to 40
[ 3245.273389] loop0: detected capacity change from 0 to 40
[ 3245.291461] loop2: detected capacity change from 0 to 40
[ 3245.299382] loop4: detected capacity change from 0 to 40
[ 3245.302885] loop5: detected capacity change from 0 to 40
[ 3245.303381] loop1: detected capacity change from 0 to 40
[ 3245.306825] loop3: detected capacity change from 0 to 40
[ 3245.315894] loop6: detected capacity change from 0 to 40
[ 3245.432274] syz-executor.5: attempt to access beyond end of device
[ 3245.432274] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3245.434186] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:54:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:54:06 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:54:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x109023, 0x0)

21:54:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3245.650059] syz-executor.2: attempt to access beyond end of device
[ 3245.650059] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3245.652446] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3245.670618] syz-executor.4: attempt to access beyond end of device
[ 3245.670618] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3245.670992] syz-executor.0: attempt to access beyond end of device
[ 3245.670992] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3245.672587] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3245.674429] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3245.681025] loop3: detected capacity change from 0 to 40
[ 3245.696913] loop7: detected capacity change from 0 to 40
[ 3245.752430] syz-executor.4: attempt to access beyond end of device
[ 3245.752430] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3245.757064] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3245.757618] syz-executor.0: attempt to access beyond end of device
[ 3245.757618] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3245.759960] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3245.769407] loop1: detected capacity change from 0 to 40
[ 3245.788897] syz-executor.6: attempt to access beyond end of device
[ 3245.788897] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3245.790753] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3245.808925] loop5: detected capacity change from 0 to 40
21:54:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3245.863387] syz-executor.1: attempt to access beyond end of device
[ 3245.863387] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3245.865390] Buffer I/O error on dev loop1, logical block 10, lost async page write
21:54:06 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3245.939081] syz-executor.5: attempt to access beyond end of device
[ 3245.939081] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3245.940947] Buffer I/O error on dev loop5, logical block 10, lost async page write
21:54:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x2000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0xaac00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x81d, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x20001, 0x22)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file1\x00'})
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3246.035751] loop2: detected capacity change from 0 to 40
[ 3246.037643] loop7: detected capacity change from 0 to 40
21:54:07 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x109023, 0x0)

21:54:07 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3246.114341] syz-executor.2: attempt to access beyond end of device
[ 3246.114341] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3246.116077] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3246.146628] loop1: detected capacity change from 0 to 40
[ 3246.147724] loop5: detected capacity change from 0 to 40
21:54:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:54:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:54:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x109023, 0x0)

21:54:23 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000440)=@known='system.sockprotoname\x00', &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x200)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r2, &(0x7f0000000180)=0x3, 0xfe)
r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x0, 0x5, 0x52f)
sendfile(r2, r1, 0x0, 0xfffffdef)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r5=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x0, r5})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x1, 0x2, 0xb0, 0x0, 0x1, 0x40100, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x6, 0x1}, 0x8000, 0x3, 0x3f, 0x0, 0x8, 0xc2, 0x5, 0x0, 0x2, 0x0, 0x20}, 0x0, 0x2, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x5, 0xef, 0x3, 0x49, 0x0, 0x3e000000000000, 0x80000, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x200, 0x1, 0x9, 0x5, 0x4, 0x80000000, 0x9, 0x0, 0x6, 0x0, 0x7fff}, r5, 0x8, r4, 0x8)

21:54:23 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='user.\\\\,][^\'*/,\x00!g-\x00'], 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:54:23 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:54:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="75732b21472d007ab600"/20], &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000340)={0x1, 0x1, "84d0f8", 0x9, 0x4})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f0000000240)='./file3\x00', &(0x7f0000000300)=@known='user.incfs.size\x00')
sendfile(r1, r0, 0x0, 0xfffffdef)

21:54:23 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0xcc5c, &(0x7f0000000140)=ANY=[])
truncate(&(0x7f0000000000)='./file1\x00', 0xba5c)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x40, 0x3)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r3)
newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x800)
r5 = getegid()
statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r6)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000440)=""/226, 0xe2}, {&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/158, 0x9e}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r7=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/254, 0xfe}, {&(0x7f0000000a80)=""/150, 0x96}, {&(0x7f0000000b40)=""/29, 0x1d}, {&(0x7f0000000b80)=""/156, 0x9c}, {&(0x7f0000000c40)=""/139, 0x8b}, {&(0x7f0000000d00)=""/232, 0xe8}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/44, 0x2c}, {&(0x7f0000001e40)}], 0x9, &(0x7f0000001f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/160, 0xa0}, {&(0x7f0000002080)=""/77, 0x4d}, {&(0x7f0000002100)=""/40, 0x28}, {&(0x7f0000002140)=""/98, 0x62}, {&(0x7f00000021c0)=""/189, 0xbd}, {&(0x7f0000002280)=""/189, 0xbd}], 0x6, &(0x7f0000002580)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0052939bf7249c637b2c638576000000"], 0x40}}], 0x3, 0x10163, &(0x7f00000024c0)={0x0, 0x3938700})
setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000002500)={{}, {0x1, 0xc}, [{0x2, 0x2}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x1}, [{}, {}, {0x8, 0x0, r3}, {0x8, 0x2, r4}, {0x8, 0x0, r5}, {0x8, 0x2, r6}, {0x8, 0x4, r7}, {0x8, 0x1, 0xee01}], {0x10, 0x6}, {0x20, 0x7}}, 0x74, 0x1)

[ 3262.692897] loop1: detected capacity change from 0 to 40
[ 3262.705000] loop0: detected capacity change from 0 to 40
[ 3262.709537] loop7: detected capacity change from 0 to 40
[ 3262.710976] loop2: detected capacity change from 0 to 40
[ 3262.714076] loop5: detected capacity change from 0 to 40
[ 3262.732469] loop4: detected capacity change from 0 to 40
[ 3262.733838] loop6: detected capacity change from 0 to 40
[ 3262.823444] bio_check_eod: 2 callbacks suppressed
[ 3262.823472] syz-executor.1: attempt to access beyond end of device
[ 3262.823472] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3262.825221] syz-executor.5: attempt to access beyond end of device
[ 3262.825221] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3262.826184] buffer_io_error: 2 callbacks suppressed
[ 3262.826205] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3262.827637] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3262.843446] blktrace: Concurrent blktraces are not allowed on sg0
21:54:23 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3262.924666] syz-executor.4: attempt to access beyond end of device
[ 3262.924666] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3262.926546] Buffer I/O error on dev loop4, logical block 10, lost async page write
21:54:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:54:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r2, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3262.986792] syz-executor.0: attempt to access beyond end of device
[ 3262.986792] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3262.988630] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3262.994354] loop7: detected capacity change from 0 to 40
[ 3262.997648] syz-executor.2: attempt to access beyond end of device
[ 3262.997648] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3262.999594] Buffer I/O error on dev loop2, logical block 10, lost async page write
21:54:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3263.057794] blktrace: Concurrent blktraces are not allowed on sg0
21:54:24 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3263.166722] loop5: detected capacity change from 0 to 40
[ 3263.182719] syz-executor.6: attempt to access beyond end of device
[ 3263.182719] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3263.184753] Buffer I/O error on dev loop6, logical block 10, lost async page write
21:54:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x44a, 0x7, &(0x7f0000001800)=[{&(0x7f0000000340)="b1f33e880b6c9ab4ebf329dc0b98f3604acc0317a79a3168529b2e6183b62409a982861705dff0534d7b82eb04ab711e07412761c6daa7d11c0ad5d9ddb3d984adceb68c10a432ea6733edfabef0cff0ec9a0458bc91adaef878a0e157bbd71d03051dc71623b1545e93f929fb9bc16f3d387663d8f202f28a8d5cbe9cafd29bef9dc0a780b2541021d44db36d2b691b56a0c18942540a", 0x97, 0x101}, {&(0x7f0000000400)="7d808e20014bacb52fcd337bb5d63a9e4f1fa447876cd1c9edd4bebab70d1c00c877f99bc7ecb6cb79d8876c7eabd61fb1881e0550022e00e641a9fc67145e5a7032c2", 0x43, 0x4}, {&(0x7f0000000480)="6d98bed445cc18ad9b040ee181b38a9ff58f07a529ae9958ded553fdcff4cb6a9e89dcd891d38d88a2ec3419869342964b4527e9c3a659941a8bc1eea01b83b791b4d5f57a4eb6b2ad4527b342fdd39ad248449b4cf332b5601f7c3b0094995e22ab239363e08b080cac25bb3b9d0ce6d45f2fa1e70bc865dfa7e6c0d4696775b0b64f762c11a42cdd69db43ee72a3f991d03f6839a209ecf86b0129b85b3a02c2fc2bf879127a282559f37cb38cb86894348314c014b99dc62c1fde6d22965c266f9ab3f2e8", 0xc6, 0x6}, {&(0x7f0000000580)="921d8dc90185e32c3e9d3338135197bdbed8282091d7fdf3ac0fccbff658a0e2cc9efc6b284a9e7c7037681d1f84d14039ed92fb7669c5ccb6c9dd2fba18974861d6ee1f8bf238039cdf03f82538ee2b68282557a7caeaad15d0146e0c23ed5191b3", 0x62, 0x7}, {&(0x7f0000000600)="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", 0x1000, 0xffffffff}, {&(0x7f0000001600)="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", 0xfc, 0x7}, {&(0x7f0000001700)="006e5f1e19a8a2f5dcb3d4c62e9eb5cbfe19d7e22abb1125e5eed40e31764897b74b6289f211ae2cd9af2125ea9fcd9f2e4b6674903baae1f845c72a82c61314491ca5544b1ab1b861e77a46fdabb6c76dac4ffe730c8fdef44ebe366b5bd74685e8dcf648346c4c159ac330def338a32a78435088ecae84fdb7197fb3523297f656a5b35042b99078461e9d62d1f76812e03fd1d153d2bc73640e44dfbf07165cd62fe9e9c242e5df004c013622acf66dd6aa0e9837474863e4d3a3cbe9c38b1fc63496d3677e58908a6af5b368", 0xce, 0x8000}], 0x800401, &(0x7f0000002c40)={[{@huge_advise}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x6b, 0x38, 0x25, 0x6b, 0x6d, 0x33, 0x67]}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}, {@huge_within_size}], [{@subj_role={'subj_role', 0x3d, '\\\\,][^\'*/,+!G-\x00'}}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x3c}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fsname={'fsname', 0x3d, ')\xea'}}, {@fowner_eq}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]})
[ 3263.200271] loop1: detected capacity change from 0 to 40
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000002bc0)={{}, {0x10000}, 0x188, 0x0, 0x0, &(0x7f0000001a00)='./file2\x00', &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)="c60f96adf0ef53c79f9449a0bbacf7aea006bae419cc", 0x16, 0x0, &(0x7f0000001ac0)={0x2, 0x1025, {0x0, 0xc, 0x1000, "d13df9755a27e8180e0757d8c4672018d451e4e88424b4ebf5203250ac6ded7a316cb1390b4646d84617a3869e9edc5a8b5dc50292a3f288bec3b84256fd836c2dcee07d8a084c7386ff9eb286409c86545b06a61bffd014b7d289f57f909b17ecf8597f898226ffcc40b8c813dd47a83dc72f46e0b8d23763254c3084161803abb36ba7e0de0daf1c256174ac32ec32a95431f1ffa2464e859116f77411dfee7ba54bb3e6c24ecdfcb4e4c26a8de26b5b0cb225179a561eeb17194920304a8821a62f6e6334d7965c9bf0809b6151be0302e782ee1853c6f9fbe0becef3141257f6d256ca0ce6e8002652dbb9c4d47e41947acb4f02a85b1cc803e8c57fe96e5bdb42151596f58ffac5d267682c5ca2a71a5a9fcaa6429ad170efd11fc112d6e042fd33e6f73043c9ea6ef08617c9c5c0b6548d30537bb2255bb266b67d9114feb6d608531b90a10dbb7ad2c10a50b50423258631da4b0604fe45bc4fe81294ef663c4577ec53a2d02b37983a5e4fa22e49cf8868734569e5ab4004c949fff39fab9ed95479ef1980c7091fd35000db8fcb799f3eb4458b08acafcb6a609a0c467d9f0339f04c5e0869fd2dbd376f34a7b4288d042538fa5155a6e7e2e0c7fbcb78f01da1b19f0de973319a8e37999bbe12a67067515009b2c32944b0688ac8321d02c1820608ffba2789a8ad1b63a49bad568088b6158bb622a76946fc8d25929658e410968713a733b3ffbb6ccd409fc6480a4318dc478144ea417d0f615e1acaea594aedaa61c7bb78b4487d4d0b905f2adf5fbdd272a7d095014dbcc2a7f4297c6324dd436a06ecfb46b057383d0cad56dcc338345c2eadf92568509d21f3fe9980ad1af35a0d5bd709237001e7e5d34fc06a2bd749c2037ce40627d9810fe082dacfae4b8b818831dfa2a5a48b5164ae307d4602addc3909601c57bc2daa704903a88a27cc8ba65e350c07e6ee674c23ba020a050430925f7cbe584f5c2d0033b2102b24053a0a1db9c4298804c3fabed0d573e9033235a4b6b1a63b454e29ba864e74006c2f1338d6769d9a331d640f0163c8548d90d11efeba8c09df4ae7613c42d68412409ae512f72868e83144bb6f7e67b4732ac07cd33006f4efe6cf34ac3f1baf38e272c586a2cfce6560014cd9719eb3a35ca77a46a75c90a40262b6f5ec46a6d398faac4fc6223b033c6ef4cc66cd395f3309d5c0c599c594184ec36c72b9c72f2201156251c4f2453c4d9d6326f0b4c4cbfc2df7cb3646e12ae30735b79b6ea03331f302fcd0ec9a38636eb22d4a6170e633efe85c34baa241276d014c0de70f68570bcb6b6c0cc150cff67adef3912ccbd062ae1e1f9bd655a4929aa756acd530672a99db0dfb7ea5fc899c2555950ab07b0fe703c41d27b061d4124ac48d69ca3c557806b181cb10c8c8f93b93000819dedfa23611a9e1b0bd6749f1b0275cf78effdc3629c1b094727566617bd0d667e682c7f2bf24336122615d211e749de75c5b0a0bcaa1b2018c3f9bfd8f2561fc0cb775ef2c98018362c2cfdf799d6ecae55028610b012b5258e33eac01d15cf64064f24b5348cd9994520562ede0e193e709902c92d9645a605907844e0049740d429272b3220d0f27a7e851d0517b7f43b075741841d74054c266f38a0d1671c93341bfbe77e1c3b5c7929070b5675de27a9f3f9571c6509803313a816a16bc627c731b088e00bfe94fa494d14e9e88a3da861f200681aaa464fcc67e9f6ed9ac4b31c1b58f0a5e27d6584b70e11692e25ab28da74f6f8c5e9251594c716aa2d39d71cfc3de2b3b59cc7083635f8baf7814eba91d00112ed4786a53f6b557ee570abd348585eeb1c724869186800be0859f47f17bc3e72d1ff336d10a21a7d38b120cb0470ff0dcbc138d10fdfb547534e32e138a60b6669263269834072e40e9e30ab46aeb4b13b3942514311312f7db525c1bb33c7a115504d16c17610ba20fba39972181bf348f0d98223487e2bb3993e5624018830f5c0018860473ad23fa8958d204bd433af74aaeac9a5da6111d18f964fac1b34fb8812d5fc9d0e97132a23f3804298a14130476ea01b18c18d1c5ce380e4dcb4e5d4d75944995199bb59aa5bd66013064b1da1c97351fd3a0ccaf4701ae4fc76eccda04a2ace1c84a82cab7e6474a9197fa60de5f415bdac1ae9f08dedb842ffb31d4aa64148f2b5c1226330b45f455b5c06f1fc1ffcce5bf19f0e6cb30032bea3a6449dc27913186f06da20b0fa3744801323dfa5e74ebe4280319bd321220b9a5b54f211106143354d71a3fbd6b1174cedc55d7bf91febc3fc61933761b7fbe881af6a1e5087bf87aa2451b40e79d9c73b326efe1b54867fd1ac60338d4834c732b0a27489584ef72af8212fa419be5d22be09224733e937422ea64d42f0f9c1d35f7b07ef753e67510644cacc85b48a1bde41b40aa63d07ac3cfd2126984eb6d1a88c5ea4b25995b6437815b1b5df2f5459e45e6c5155c4c2b0ebefe3d42852618cea6a54c909cd30e6f05788f127c355f6a7458143faac421094c580e9a299b2b9a5fc957183d3e22ba116ddb44194ad5687cb2b317ce3698455312c69ef91abd359e606ea5920a4ab29b5a3b6252c192afbabd3d2313e1a2fa4a5b7e30d2db538c896bc817bf819ad2dd9b5e4e7a851539b2819db58d4740813840cf99e5ec392f4c8d168056c7fcfb9fb964cd47e30eac7d22f1e80198c194c1df2714bd8fa98431118988d47a09cb0d1229b14060013c07239c0ab8d2a1c30c72b1a82e49f9c3149953b328767ed7554f1f42c331434a29c490ee2e39d22c178926d9b14d732afc7c4b4c738bb35af154d29d13f8063dbc4dcd075e2c40c7779adf2bb9f30dcca3b993e80fe6a5fe127b427739d0d5c568044b5daeb5cc7269c72cdecbfe63bf34454285724d045a0e76e222ae2d11159c105670ea020c5bc85f392aa166c06ab111cb4fcd68dc55ab54422a50d436556bbd340e7241524b60eb21a92e2dc5355c9c8687a5de98884194ec152a33b9b3cde5468ac55e8a79ae62cb59804e307a4e42acf9c7b37b4bc62c96855a550cfa2f1872d59946aec72ba3e44f07ab2dead30f5477d86e3bcca364537016efcca4e3a5fd6db0d794c6fd2033e256f6af224d0e38d05f90ede080788425760b9fd182a59810f2ee90b24d71cfdecbdd28e43031408969d17eed6dff26c34c6473630cb1c5b34a8d52b693c6d71e103f022d8552d1bc7a0eaf52c2b936c4fde4d39ff016f7275d31d00ad2428adf946fc885435f5831d3bf19191f3123758088e27effdfa912ff351dd66c77facd90c8b6d7ffe836efcb4f3a8eb6e4bc2c1fe60405507727289cf9769a54e997c85068a2ddfab74ed1e281b058c4f0fe9ddf8e983a8e71db304cc7e8e5e0502f16b156cd197c25fe83c9e7199be78aa6e4a456b6ac2c02597a2f60f9ce5d8cca909f178aaa5b9ebe05e0e4f94a22660537109a5be7a8103267597b6985282295264c6a7b5610acbcbcee4baa72625c6ead686c2f62a3eac4c5189f11252150116a11af3beb5e9925eed8efe9306bb23e16c1d989a607211a41212a6640cc9413e352f6e8a4749539992e53585fc9bd77187f127b0a51225d898f1bd1bbc57361640ef6a7e73944ca1f9edb092659f2854e10d7b9f149d44e876ba5eb31a3450bd4c2f4b3defb4b2c1c9eb2900e2a3e150ec697057324ccef951c0b16b228950f751f2cb2a7bfe460360e42f789169760d199252d0ae14514fc86aff41a20f0cec99b424dcd7fd0f64e7e5021f65cc373dd43c26b6a2ad395e886d542e2fa20b4474a65c068bef85227e20cb6a523a0b61a64d66cf6678fad3146332f593543103465d5d0b7842e98d846f203aa1a1538c059051d493b5636821b78c458d42eb6effb98e67ea44fe48b7993ebd751b7d56cbf1ea96a04d16fbe3586b714d3500146c2eec45db55b99f3b05df70aa420052ad31f9acc4a7102ea71c31a5680fca0cd0e2e34c81989f2bc1a7cfc52334a98d86faec72a8dd154bd0e2e8d569729d0502b38bcea22895eb758ea935830c90858393657bf8fc1ff76a9f06924d5025d264dc8c48bc5f58969a3cb5ed86b5e5a0d59f3cca3beb60bbd68df4ccacba076f44061ab71693a77e8bca0c9134c43654f517ec14cac28e3f6839b278d6e569003a6fa996b5261c26038c064f9c7b64cd32e4e6a11e0e520ee2059a60a8eba69078306b466adb6608fb3f78bf44933e1efc2fd105f28605fe5a02ed8e4fb492be916261f9a6e3ada006a3414abe27a125b45b2451380feca13ec736148641c4875834ac80408c3d64fa32ed1d97bd88712e11dd66d6ee8c3f26e19e21f2c3a4651944f75ab78062ef1351b357db2efa9083a3e91d7b3dd4f0a5c2ba11da345b4aa87aa9926c3b2c02cacf75ef909d63f922ab5dec30b3ccb80e2bf2a5fed44ad5b4f22dbcc54c95a2ec9025032e14c1adc38c9d316ae227f18847587234bcdc3690401db06e788d6aa987105a6bd50ef86ccfa52f446b8c1e28da8d16c5958182843045dbd98d84582a914aa51cb8365579aac6dbe3841f6de6c4e728c8fd62c6c00e1f629f6401b2f3018e2bca2ef8c022cb01196acc2b2e63ea712ace418fd7d320fca90301faedd35c12534a76e276fac82914a6d032360d5ac170fcb97c25cc0061b030cd225ac20a21985e91a37ac4cf0403094b6f51d83d388071c8c0dece8b2d55a9c07c109e572c4fd3465fa9f57b298b101ae89496afa7309ab69dea4a121bc35279768c89e4703f3d578b274c830159ef73271f6b3640c32490a1c0180ef13931ea42f7cddd9c9cf80f36e817aeaee263e56b3cbf1e458d02f811a290b6c92eca0a1df999580c8bb6de4a53317cc2c68d83c46e4d826c89dcf8ea11bbe88e4757ea46f19cc2000023662b0515f9bc4ed7e974fee7212387f5428aab31f5f3732b3c1ab9aaaca26deebeae4865fcd84b5e002fd840e7de2ad5d18e4cc63d7217ad023aa6f8608bb5eef4a684efbf45c76b8131532795c4e938b3872cd6946ede4ab30645b203aa6dec5186af0ab2b18fbe82dc14505c7aca8405221bab30057eee6f445a8140fc7d23bfe7ccfeaf811febbfbec6138bd56bf46604e10c6774d07ebdcaff37e7ea55684bdc42456e6343c33f2ab543bff90670f1dee36be91351e61cd821424843d880bd11dfd1f565d817be1979e95bff9f509c64503d0f095662c6c47e9e727610bc0d88955679c4445c9efac3cc4369e6b01228f2cdeb1f2ef1a9868f2dc3720d1730f20ccd19d4cf0b1492451d9f680ee46e3be00733b6718b6d8c619f0c34519cc6f05e27cf376e55532da2f1031ee72acae53e8883bd36c3db6ac95f61423a0fe4c9fb0c7b6cc673291063817587414b60773ab5358b1f44ffe95be4623ae1a17f08f0c79d6042525a20ed0a993c635b5f2846bd1a2540e3b045cf15de8834e97cc554e6bc49703b099db844f27bbaceb387baedfb488411d69d922225df1fd2d6ecffb9257c1ba0b0e3c85a0968d71ee461a842b72e9410f599ecbf654857a8147ca3a26ffc1c9d457eb05e7ad8c5a1418be05b0f4b1f9883ceb7c105abc2e5a03669db669a19715b6b6b1e35b300d749e7d2a7623d16cdd32b74a83c82a73e4b396585df450e9228c8e1c56e8696adc9011a0bbe4306b94e1c6012ba2c601e2b56438ea6161a56f6aa4b7fd4994759be798104f0edf168735cc6fafd8ec5b5751e16bb4b4a3aba8839b85bcbeb1f32ea0685e39ab2b4b0ca2abd259185baa776758d3", 0x18, "452f8c9eec08d17fa20343c2a4af6cb109b8e7d03cb99ad0"}, 0xb1, "1f9978e4385557351038896a6f4095e1677b98b9268c3f67265b08628c0a85aaf7538776a33b2b4155339b527f71f17d359f3b3941803c6dea6f695dbf4674538a5936c6af446dd26ed09ea493a3fcc5cca3017d3b7deda8be1aff0014ae7fc75890e8a8fdc1f26cf4759d233a661a038ea9142c1403708d73c4a9353089b2b4cb38c3d410ab60055e8987f34a142f3991d2e955e99312b2b7a4a0b3a19471743bf98e30f71865ac4d2c805bc12498cfc7"}, 0x10e2})
sendfile(r1, r0, 0x0, 0xfffffdef)

21:54:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r0}}, 0x86)
lgetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='user.\\\\,]L^\'*/,+!G-\x00'], &(0x7f00000001c0)=""/39, 0x27)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/loop', 0x10002, 0x40)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x9c, 0x2, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x108}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x200408c4)

[ 3263.269356] kworker/u4:0: attempt to access beyond end of device
[ 3263.269356] loop4: rw=1, sector=44, nr_sectors = 40 limit=40
21:54:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

[ 3263.284962] syz-executor.6: attempt to access beyond end of device
[ 3263.284962] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3263.286755] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3263.298054] syz-executor.5: attempt to access beyond end of device
[ 3263.298054] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3263.299803] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 3263.319580] syz-executor.1: attempt to access beyond end of device
[ 3263.319580] loop1: rw=2049, sector=44, nr_sectors = 4 limit=40
[ 3263.321308] Buffer I/O error on dev loop1, logical block 11, lost async page write
[ 3263.321688] loop2: detected capacity change from 0 to 40
[ 3263.327095] loop7: detected capacity change from 0 to 40
21:54:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3263.352948] loop0: detected capacity change from 0 to 40
[ 3263.414861] loop4: detected capacity change from 0 to 40
[ 3263.420644] FAT-fs (loop3): bogus number of reserved sectors
[ 3263.421514] FAT-fs (loop3): Can't find a valid FAT filesystem
21:54:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r2, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:54:24 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(r0, &(0x7f0000000340)='./file1\x00', 0x50000, 0x1a4)
setxattr$security_selinux(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000240), &(0x7f0000000300)='system_u:object_r:apt_exec_t:s0\x00', 0x20, 0x3)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3263.553531] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3263.603135] loop5: detected capacity change from 0 to 40
[ 3263.624593] loop6: detected capacity change from 0 to 40
21:54:39 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:54:39 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:54:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
name_to_handle_at(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=@nfs={0x90, 0x24, {0xb8da, 0xb46, 0x1000, 0x80, "06a28e3567cc0eae31fc0852b7ddcb17986f7248a421a2e2975feac1004ceb89431d607381001f0bc295ecbdce7f7e92e1942e062c606ff3f471f92c941fbb011f3cb26afedbcf54307b3feaf2e2752d8c096ec4acb51046a6610ff94013f1857c29450fc407690452a8d6cac2fc8c16f2949121f26c41d2819e41999e4e27cf"}}, &(0x7f00000003c0), 0x1400)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:54:39 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x400000, 0x20)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:54:39 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r2, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="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", 0x566}], 0x2}}], 0x1, 0x8004)
sendfile(r1, r0, 0x0, 0xfffffdef)

21:54:39 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/39, 0x27)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = openat2(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180)={0xd0002, 0x20, 0x4}, 0x18)
inotify_add_watch(r3, &(0x7f0000000240)='./file1\x00', 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

21:54:39 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

[ 3278.750273] FAT-fs (loop3): bogus number of reserved sectors
[ 3278.751353] FAT-fs (loop3): Can't find a valid FAT filesystem
21:54:39 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, 0x0, 0x0)
openat(r0, &(0x7f0000000340)='./file1\x00', 0x50000, 0x1a4)
setxattr$security_selinux(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000240), &(0x7f0000000300)='system_u:object_r:apt_exec_t:s0\x00', 0x20, 0x3)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3278.791946] loop5: detected capacity change from 0 to 40
[ 3278.794461] loop0: detected capacity change from 0 to 40
[ 3278.796253] loop4: detected capacity change from 0 to 40
[ 3278.796414] loop7: detected capacity change from 0 to 40
[ 3278.802596] loop2: detected capacity change from 0 to 40
[ 3278.805080] loop6: detected capacity change from 0 to 40
[ 3278.845907] loop1: detected capacity change from 0 to 40
21:54:39 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc4c}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file2\x00')

21:54:39 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x245)
sendfile(r1, r0, 0x0, 0xfffffdef)
syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x109023, 0x0)

21:54:39 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(0x0, &(0x7f0000000040)=@random={'user.', '\\\\,][^\'*/,+!G-\x00'}, &(0x7f00000001c0)=""/29, 0x1d)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
removexattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r2, &(0x7f0000002600)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="f5321442e072e787a0661b45b41f92eb46c75a2099f6ef85df2483a91a834bab806826a6a6a0f7c760b54597989b447eb5eaabab5731b3243c947e104cda90359b15eb4a61a884", 0x47}, {&(0x7f0000000100)="57b8cb0cd9cf6b6feba636c57c35c61d497c9bb015ee504f29a2ea78616e42421976a6b7318e1660501c1a8badcc8b5ae2fe7948611c8ba7efc6b4258fcf513067d318d1d511e9926c909202e40f4dc7ecddfba4a5a5323d8a049938defc445aa5e218906eebb0a6de9cde94f9df3da382c4f9f9df22a58d83d93561175daef2b8ee739d0cf7a989aa970040c8f5d32ab0382ee686759ee64eac1e95f34b268d11f924d22793ac530e0389420208a48d9e671eb570e8df612ef1fcdec4fef138aecbdbce207e0010246d15f625d9c9e2efa7937bbe4fdd7f5646c0ce9d8588110a8a5a7a55a085aeb785b23eca31293b22c33dac45a02eda30fc032737d73f0b62ceda6c121918d4220171aca90155e500c4374a6e2f20835ce87eb8ca563884dd785fc5371573763ce66da7159d622815a1fa6654d5b743befd5c485474942b715838c154aaa4aac685e6cff663ba6d0babaa16b07eb709fb4e7e041a3ede187c52a1d26c5c56bdf777e13d89725d4f4c366e3788e04a48ebef2fd5a8347fbd513b8f06e82e96fe7fe80628f669bf4ea4c8559bd0848584e71623e88ab302ddaacf5dfff88a533e55549613b63b64f01a37eb82f19fe820842a081e726d45a335d34c70c0bdf63f2b6cd5bedb096f4787e5c080e72bfb445334af9b4e7e3bee4c56b370481555be498ec1957c66481140c3c93c42d95bb517f9ae010ccbff0122e2c685c9cc41e83e122e5ed41bdf505799c9e5b3084b2c16027359334a68702bb4e4c936b4f67aa3f5df6d3da97abb2df7fcab70b77d9a1de287646f7653a8bfad3c3ee40ac063ef162f0f6d9008133bbe32c9f7efc090f4272d6b10f01f1126d6b884e51beda2b03213fa39e15b28951802b6c0bdab7f5fe1f042abccb477c5f3ee9fc59f419b64067bdca2338f62bccb83f12373d585c5330e96f748992722bc992bacba17f2157a1808f7d77aeebba67303a42ac7dd43ef8d7410fb9509d332c7596ea146c6bc63bf02feaf10c8672fcd2b92654b7a1961cdec1b89fc2836fb83cc7791b5a6db5475779022a8ec267a3d39e5e7fca46a6823b4e1a3f4590b6595f1d0ef2c69b8a13cb10ab0589e694197366da82d6fda3af1f25cc5548e1b3367e963b419709a2cf99932fd2c5818bf2fa31813334cc064c37cf3c6ba84468872514cf5663420d021519698b1756bfd5a81df12e4f15ff23d66e7ac9b6ae1152a44e20fc3e39166d3d76d65d51fd65d2126b3059f498b2feadd51726539a1f5dd39cb3433e866cd8906e00ef4ca18c05942757de2ff98c14ecf50375f01baf58dd89cc81e9b0aac0304f9b1b5a5d2ccd24aaa64c41240937f3347d6f0f7405c78e05ffbe8bf55242c17e76d4be140426a503ab8e932b6ec3868367e6d6203f736b5592864ca621f89c456dad7a0f08c965450fd169dbcff3cff2a920052bb847a35c4392552f8017bdaf045940e91f6e88691b80fb094c0bfae1f50548e72b5b158f464e859dcaff9ccfccc0cdc74dbb34f155ff86da549c748176eec79aecc3078b96dd27ddb82fa3fe33bd7fb4810c5b52aa7aa7d2ecfd22d1c9699d3573283234e20fb22048d511182c7fdf304aafbde4d2e3bdae505c00722d5d601d4ba2658dbaa7f433e6a9c2887cb2d93319da04df149ce51cbed32f87c33b6b47854fe3d4d35e0d215c8d1bc60594a9abfecbe84c85c5812c3381713f418c2db7c8b50b76698077545548eb914a3ff850f4313399d0b7b48a14666d8e39be511d42ee12fef7b544e3831c8da9bc6e0292e87e859282fae2afe70b5800cf002fa5d8ab7420e68ef2b17d50834d7a581bbf92f871f608c16694186758bd6854e674158505628d87fcc1354c3be5e3018bcbe3fe144bd40de01baaa9c1456f8f542d7f8a82ae1ca05d4c11bc0576abf5b13f4ec051560b5113ce5fe37dbe3d795e261dd0195a457", 0x566}], 0x2}}], 0x1, 0x8004)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3279.075837] FAT-fs (loop3): bogus number of reserved sectors
[ 3279.076754] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 3279.097576] bio_check_eod: 5 callbacks suppressed
[ 3279.097599] syz-executor.4: attempt to access beyond end of device
[ 3279.097599] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3279.100707] buffer_io_error: 4 callbacks suppressed
[ 3279.100727] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 3279.101505] syz-executor.0: attempt to access beyond end of device
[ 3279.101505] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3279.101549] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3279.112435] syz-executor.6: attempt to access beyond end of device
[ 3279.112435] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3279.113933] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3279.116854] loop5: detected capacity change from 0 to 40
[ 3279.122585] syz-executor.2: attempt to access beyond end of device
[ 3279.122585] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3279.124415] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3279.131670] loop7: detected capacity change from 0 to 40
[ 3279.141308] syz-executor.0: attempt to access beyond end of device
[ 3279.141308] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3279.142548] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 3279.166828] syz-executor.1: attempt to access beyond end of device
[ 3279.166828] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3279.167271] syz-executor.6: attempt to access beyond end of device
[ 3279.167271] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3279.168947] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3279.169552] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3279.170634] syz-executor.2: attempt to access beyond end of device
[ 3279.170634] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3279.172741] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 3279.642436] ==================================================================
[ 3279.643348] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70
[ 3279.644143] Read of size 8 at addr ffff8880102177b8 by task syz-executor/13173
[ 3279.644990] 
[ 3279.645207] CPU: 1 PID: 13173 Comm: syz-executor Not tainted 6.1.0-rc8-next-20221207 #1
[ 3279.646156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3279.647128] Call Trace:
[ 3279.647449]  <TASK>
[ 3279.647732]  dump_stack_lvl+0x8f/0xb7
[ 3279.648214]  print_report+0x175/0x478
[ 3279.648690]  ? __lock_acquire+0x42c9/0x5e70
[ 3279.649220]  kasan_report+0xbf/0x1c0
[ 3279.649698]  ? __lock_acquire+0x42c9/0x5e70
[ 3279.650244]  __lock_acquire+0x42c9/0x5e70
[ 3279.650749]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 3279.651310]  ? finish_task_switch.isra.0+0x22d/0x8a0
[ 3279.651911]  ? __pfx___lock_acquire+0x10/0x10
[ 3279.652457]  ? __switch_to+0x5c3/0xee0
[ 3279.652951]  lock_acquire+0x1a6/0x530
[ 3279.653418]  ? kmemleak_scan+0x1a0/0x1600
[ 3279.657677]  ? __pfx_lock_acquire+0x10/0x10
[ 3279.658230]  ? __call_rcu_common.constprop.0+0x589/0xa40
[ 3279.658873]  ? __call_rcu_common.constprop.0+0x589/0xa40
[ 3279.659530]  ? lockdep_hardirqs_on+0x7d/0x100
[ 3279.660079]  ? _raw_spin_lock_irq+0x45/0x50
[ 3279.660603]  _raw_spin_lock_irq+0x36/0x50
[ 3279.661103]  ? kmemleak_scan+0x1a0/0x1600
[ 3279.661612]  kmemleak_scan+0x1a0/0x1600
[ 3279.662111]  ? __pfx_kmemleak_scan+0x10/0x10
[ 3279.662661]  ? strncpy_from_user+0x107/0x500
[ 3279.663191]  kmemleak_write+0x574/0x680
[ 3279.663680]  ? __pfx_kmemleak_write+0x10/0x10
[ 3279.664233]  ? debugfs_file_get+0x1d2/0x450
[ 3279.664759]  ? __pfx_debugfs_file_get+0x10/0x10
[ 3279.665328]  full_proxy_write+0x121/0x190
[ 3279.665848]  vfs_write+0x358/0xe40
[ 3279.666289]  ? __pfx_full_proxy_write+0x10/0x10
[ 3279.666856]  ? __pfx_vfs_write+0x10/0x10
[ 3279.667359]  ? lock_release+0x3b6/0x750
[ 3279.667841]  ? __up_read+0x192/0x730
[ 3279.668306]  ? handle_mm_fault+0x43d/0xae0
[ 3279.668812]  ? __pfx___up_read+0x10/0x10
[ 3279.669305]  ? __fget_light+0x212/0x280
[ 3279.669811]  ksys_write+0x12b/0x260
[ 3279.670260]  ? __pfx_ksys_write+0x10/0x10
[ 3279.670760]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3279.671363]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3279.671961]  do_syscall_64+0x3f/0x90
[ 3279.672412]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3279.673011] RIP: 0033:0x7f9988fd95c3
[ 3279.673449] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18
[ 3279.675474] RSP: 002b:00007ffe36c5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3279.676333] RAX: ffffffffffffffda RBX: 00007ffe36c5f678 RCX: 00007f9988fd95c3
[ 3279.677140] RDX: 0000000000000004 RSI: 00007f998908fed9 RDI: 0000000000000003
[ 3279.677961] RBP: 0000000000000002 R08: 0000000000000ccf R09: 00007ffe36d0a080
[ 3279.678772] R10: 00007ffe36d0a090 R11: 0000000000000246 R12: 00000000fffffff6
[ 3279.679588] R13: 00007ffe36c60ef1 R14: 0000000000000000 R15: 0000000000320969
[ 3279.680395]  </TASK>
[ 3279.680675] 
[ 3279.680882] Allocated by task 100:
[ 3279.681295]  kasan_save_stack+0x22/0x50
[ 3279.681784]  kasan_set_track+0x25/0x30
[ 3279.682254]  __kasan_slab_alloc+0x5c/0x70
[ 3279.682743]  kmem_cache_alloc+0x1e1/0x410
[ 3279.683226]  __create_object+0x3d/0xc10
[ 3279.683698]  kmem_cache_alloc+0x273/0x410
[ 3279.684182]  __alloc_file+0x21/0x240
[ 3279.684630]  alloc_empty_file+0x71/0x170
[ 3279.685108]  path_openat+0xd4/0x29b0
[ 3279.685564]  do_filp_open+0x1ba/0x410
[ 3279.686033]  do_sys_openat2+0x171/0x4c0
[ 3279.686506]  __x64_sys_openat+0x143/0x200
[ 3279.686997]  do_syscall_64+0x3f/0x90
[ 3279.687441]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3279.688035] 
[ 3279.688241] Freed by task 19:
[ 3279.688603]  kasan_save_stack+0x22/0x50
[ 3279.689075]  kasan_set_track+0x25/0x30
[ 3279.689543]  kasan_save_free_info+0x2e/0x50
[ 3279.690064]  __kasan_slab_free+0x10a/0x190
[ 3279.690560]  kmem_cache_free+0xfb/0x610
[ 3279.691020]  rcu_core+0x7e2/0x2090
[ 3279.691438]  __do_softirq+0x1c7/0x8f9
[ 3279.691895] 
[ 3279.692098] Last potentially related work creation:
[ 3279.692659]  kasan_save_stack+0x22/0x50
[ 3279.693126]  __kasan_record_aux_stack+0x95/0xb0
[ 3279.693685]  __call_rcu_common.constprop.0+0x6a/0xa40
[ 3279.694299]  kmem_cache_free+0xc1/0x610
[ 3279.694766]  rcu_core+0x7e2/0x2090
[ 3279.695181]  __do_softirq+0x1c7/0x8f9
[ 3279.695640] 
[ 3279.695844] Second to last potentially related work creation:
[ 3279.696493]  kasan_save_stack+0x22/0x50
[ 3279.696963]  __kasan_record_aux_stack+0x95/0xb0
[ 3279.697519]  __call_rcu_common.constprop.0+0x6a/0xa40
[ 3279.698145]  kmem_cache_free+0xc1/0x610
[ 3279.698608]  putname+0x102/0x140
[ 3279.699015]  user_path_at_empty+0x51/0x70
[ 3279.699505]  do_utimes_path+0xd9/0x1b0
[ 3279.699966]  do_utimes+0x35/0x100
[ 3279.700381]  __x64_sys_utimensat+0x194/0x260
[ 3279.700897]  do_syscall_64+0x3f/0x90
[ 3279.701331]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3279.701942] 
[ 3279.702145] The buggy address belongs to the object at ffff8880102177a0
[ 3279.702145]  which belongs to the cache kmemleak_object of size 368
[ 3279.703551] The buggy address is located 24 bytes inside of
[ 3279.703551]  368-byte region [ffff8880102177a0, ffff888010217910)
[ 3279.704825] 
[ 3279.705033] The buggy address belongs to the physical page:
[ 3279.705657] page:000000005a7ff3a4 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10216
[ 3279.706696] head:000000005a7ff3a4 order:1 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0
[ 3279.707727] flags: 0x100000000010200(slab|head|node=0|zone=1)
[ 3279.708403] raw: 0100000000010200 ffff88800844f780 dead000000000100 dead000000000122
[ 3279.709305] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000
[ 3279.710170] page dumped because: kasan: bad access detected
[ 3279.710793] 
[ 3279.710994] Memory state around the buggy address:
[ 3279.711543]  ffff888010217680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3279.712336]  ffff888010217700: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 3279.713143] >ffff888010217780: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb
[ 3279.713942]                                         ^
[ 3279.714507]  ffff888010217800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3279.715301]  ffff888010217880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3279.716083] ==================================================================
[ 3279.716874] Disabling lock debugging due to kernel taint

VM DIAGNOSIS:
21:54:40  Registers:
info registers vcpu 0
RAX=1ffff11001dfed21 RBX=ffff88800eff68d8 RCX=ffffffff812ca1c5 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88800eff6908 RBP=ffff88800face340 RSP=ffff88801936fce8
R8 =0000000000000001 R9 =ffff88801936fc8b R10=ffffed100326df91 R11=0000000000000001
R12=dffffc0000000000 R13=ffff88800fac5500 R14=0000000000000000 R15=ffff888008c95280
RIP=ffffffff8180bcb2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f702cb508c0 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe4cf61e9000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe4cf61e7000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe36d0a080 CR3=000000000cfa0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f
XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=696e656420737365636341002f737973
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000555c910196800000555c9102f290
XMM06=0000555c910511000000000000000000 XMM07=00000000000000000000000000000000
XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82489835 RDI=ffffffff87fb5b60 RBP=ffffffff87fb5b20 RSP=ffff888049faf1e8
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000065 R11=0000000000000001
R12=0000000000000065 R13=ffffffff87fb5b20 R14=0000000000000010 R15=ffffffff82489820
RIP=ffffffff8248988d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555611c400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0205202000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0205200000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555c910186a0 CR3=000000001ae76000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=000000000000000000000000000000ff
XMM02=000000000000000000000000000000ff XMM03=7269762f736563697665642f7379732f
XMM04=00000003000000000000555c910248e0 XMM05=0000555c9102d0700000555c9102d050
XMM06=0000555c91041f800000000000000000 XMM07=00000000000000000000000000000000
XMM08=2064616572206f742064656c69614600 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000